mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 22:35:35 +00:00
Code Issues Releases Wiki Activity

Various cupsd profile fixes/additions

Browse Source 
Changed /var/run/cups/** rw, to
  /{,var/}run/cups/ rw,
  /{,var/}run/cups/** rw,
as requested by Steve Beattie

With this change:
Acked-By: Steve Beattie <sbeattie@ubuntu.com>
This commit is contained in:
Christian Boltz
2011-08-08 23:18:54 +02:00
parent d081f7cb85
commit 851a8c8b3a
1 changed files with 20 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
profiles/apparmor/profiles/extras/usr.sbin.cupsd
View File

@@ -16,20 +16,31 @@
capability setuid, capability setuid,
/bin/bash ixr, /bin/bash ixr,
/bin/cat ix,
/usr/bin/foomatic-rip ixr,
/etc/foomatic/** r,
/usr/bin/gs ix,
/usr/lib/ghostscript/** m,
/usr/lib64/ghostscript/** m,
/usr/share/ghostscript/** r,
/etc/ghostscript/** r,
/dev/lp0 rw, /dev/lp0 rw,
/dev/tty rw, /dev/tty rw,
/dev/ttyS? w, /dev/ttyS? w,
/etc/cups rw, /etc/cups rw,
/etc/cups/ r, /etc/cups/ r,
/etc/cups/* r, /etc/cups/** r,
/etc/cups/certs w, /etc/cups/certs w,
/etc/cups/certs/* w, /etc/cups/certs/* w,
/etc/cups/classes.conf rw, /etc/cups/*.conf* rw,
/etc/cups/cupsd.conf rw,
/etc/cups/ppd rw, /etc/cups/ppd rw,
/etc/printcap rw,
/etc/cups/printcap rw, /etc/cups/printcap rw,
/etc/cups/printers.conf rw,
/etc/cups/ssl rw, /etc/cups/ssl rw,
/etc/cups/yes/* rw,
/etc/hosts.allow r, /etc/hosts.allow r,
/etc/hosts.deny r, /etc/hosts.deny r,
/proc/meminfo r, /proc/meminfo r,
@@ -39,11 +50,15 @@
/usr/bin/smbspool ixr, /usr/bin/smbspool ixr,
/usr/lib/cups/backend/* ixr, /usr/lib/cups/backend/* ixr,
/usr/lib/cups/filter/* ixr, /usr/lib/cups/filter/* ixr,
/usr/sbin/cupsd mr, /usr/sbin/cupsd mixr,
/usr/share/cups/** r, /usr/share/cups/** r,
/var/log/cups/access_log rw, /var/log/cups/access_log rw,
/var/log/cups/error_log rw, /var/log/cups/error_log rw,
/var/spool/cups rw, /var/spool/cups rw,
/var/spool/cups/** rw,
/var/spool/cups/tmp w, /var/spool/cups/tmp w,
/var/spool/cups/tmp/ r, /var/spool/cups/tmp/ r,
/{var/,}run/cups/** rw,
/var/cache/cups/ rw,
/var/cache/cups/** rw,
} }