← Back to team overview

touch-packages team mailing list archive

  1. touch-packages team
  2. Mailing list archive
  3. Message #129993

[Bug 1536201] [NEW] cupsctl can corrupt cupsd.conf if invoked by member of lpadmin group

  Thread Previous • Date Previous • • Thread Next 
Public bug reported:

In Ubuntu 14.04 and 15.10, the sequence

sudo cupsctl WebInterface=No
sudo cupsctl WebInterface=Yes

always does what it is supposed to, but if a member of the 'lpadmin'
group invokes

cupsctl WebInterface=No
cupsctl WebInterface=Yes

without 'sudo', /etc/cups/cupsd.conf will be corrupted to:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd";>
  <HTML>
  <HEAD>
  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
    <TITLE>Web Interface is Disabled - CUPS v1.7.2</TITLE>
      <LINK REL="STYLESHEET" TYPE="text/css" HREF="/cups.css">
      </HEAD>
      <BODY>
      <H1>Web Interface is Disabled</H1>
        <P>The web interface is currently disabled. Run "cupsctl WebInterface=yes" to enable it.</P>
        </BODY>
      </HTML>
WebInterface Yes

and the cups daemon will start malfunctioning instantly.

This does not happen on CentOS or FreeBSD, so the Ubuntu package is not
configured correctly.

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: cups 1.7.2-0ubuntu1.7
ProcVersionSignature: Ubuntu 3.13.0-76.120-generic 3.13.11-ckt30
Uname: Linux 3.13.0-76-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.14.1-0ubuntu3.19
Architecture: amd64
CurrentDesktop: KDE
Date: Wed Jan 20 15:16:32 2016
InstallationDate: Installed on 2015-02-13 (340 days ago)
InstallationMedia: Kubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
Lpstat: Error: command ['lpstat', '-v'] failed with exit code 1: lpstat: Bad file descriptor
MachineType: Hewlett-Packard HP Z600 Workstation
Papersize: a4
PpdFiles:
 Buero: HP Business Inkjet 3000 PS - RC1.1 Postscript (recommended)
 Testo: Generic PostScript Printer
 XeroxFollowMe: Xerox Global Printer Driver PS3
 ServerraumErsatz: HP LaserJet 1320 series Postscript (recommended)
 Serverraum: HP Color LaserJet 4730mfp Postscript (recommended)
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.13.0-76-generic root=UUID=3d82eb97-c695-48dc-8766-aa6277e95d4c ro quiet splash
SourcePackage: cups
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 08/19/2009
dmi.bios.vendor: Hewlett-Packard
dmi.bios.version: 786G4 v01.17
dmi.board.name: 0AE8h
dmi.board.vendor: Hewlett-Packard
dmi.chassis.asset.tag: CZC9473M6D
dmi.chassis.type: 6
dmi.chassis.vendor: Hewlett-Packard
dmi.modalias: dmi:bvnHewlett-Packard:bvr786G4v01.17:bd08/19/2009:svnHewlett-Packard:pnHPZ600Workstation:pvr:rvnHewlett-Packard:rn0AE8h:rvr:cvnHewlett-Packard:ct6:cvr:
dmi.product.name: HP Z600 Workstation
dmi.sys.vendor: Hewlett-Packard

** Affects: cups (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apparmor apport-bug trusty

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to cups in Ubuntu.
https://bugs.launchpad.net/bugs/1536201

Title:
  cupsctl can corrupt cupsd.conf if invoked by member of lpadmin group

Status in cups package in Ubuntu:
  New

Bug description:
  In Ubuntu 14.04 and 15.10, the sequence

  sudo cupsctl WebInterface=No
  sudo cupsctl WebInterface=Yes

  always does what it is supposed to, but if a member of the 'lpadmin'
  group invokes

  cupsctl WebInterface=No
  cupsctl WebInterface=Yes

  without 'sudo', /etc/cups/cupsd.conf will be corrupted to:

  <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd";>
    <HTML>
    <HEAD>
    <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
      <TITLE>Web Interface is Disabled - CUPS v1.7.2</TITLE>
        <LINK REL="STYLESHEET" TYPE="text/css" HREF="/cups.css">
        </HEAD>
        <BODY>
        <H1>Web Interface is Disabled</H1>
          <P>The web interface is currently disabled. Run "cupsctl WebInterface=yes" to enable it.</P>
          </BODY>
        </HTML>
  WebInterface Yes

  and the cups daemon will start malfunctioning instantly.

  This does not happen on CentOS or FreeBSD, so the Ubuntu package is
  not configured correctly.

  ProblemType: Bug
  DistroRelease: Ubuntu 14.04
  Package: cups 1.7.2-0ubuntu1.7
  ProcVersionSignature: Ubuntu 3.13.0-76.120-generic 3.13.11-ckt30
  Uname: Linux 3.13.0-76-generic x86_64
  NonfreeKernelModules: nvidia
  ApportVersion: 2.14.1-0ubuntu3.19
  Architecture: amd64
  CurrentDesktop: KDE
  Date: Wed Jan 20 15:16:32 2016
  InstallationDate: Installed on 2015-02-13 (340 days ago)
  InstallationMedia: Kubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
  Lpstat: Error: command ['lpstat', '-v'] failed with exit code 1: lpstat: Bad file descriptor
  MachineType: Hewlett-Packard HP Z600 Workstation
  Papersize: a4
  PpdFiles:
   Buero: HP Business Inkjet 3000 PS - RC1.1 Postscript (recommended)
   Testo: Generic PostScript Printer
   XeroxFollowMe: Xerox Global Printer Driver PS3
   ServerraumErsatz: HP LaserJet 1320 series Postscript (recommended)
   Serverraum: HP Color LaserJet 4730mfp Postscript (recommended)
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.13.0-76-generic root=UUID=3d82eb97-c695-48dc-8766-aa6277e95d4c ro quiet splash
  SourcePackage: cups
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 08/19/2009
  dmi.bios.vendor: Hewlett-Packard
  dmi.bios.version: 786G4 v01.17
  dmi.board.name: 0AE8h
  dmi.board.vendor: Hewlett-Packard
  dmi.chassis.asset.tag: CZC9473M6D
  dmi.chassis.type: 6
  dmi.chassis.vendor: Hewlett-Packard
  dmi.modalias: dmi:bvnHewlett-Packard:bvr786G4v01.17:bd08/19/2009:svnHewlett-Packard:pnHPZ600Workstation:pvr:rvnHewlett-Packard:rn0AE8h:rvr:cvnHewlett-Packard:ct6:cvr:
  dmi.product.name: HP Z600 Workstation
  dmi.sys.vendor: Hewlett-Packard

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups/+bug/1536201/+subscriptions

Follow ups

  Thread Previous • Date Previous • • Thread Next