cupsys 1.2.7-2ubuntu1 source package in Ubuntu

Changelog

cupsys (1.2.7-2ubuntu1) feisty; urgency=low

  * Merge from debian unstable, remaining changes:
    - Snakeoil SSL cert support:
      + debian/control: Add ssl-cert dependency.
      + debian/cupsys.postinst: Symlink snakeoil SSL certificate if present.
    - TearDown (fast shutdown):
      + debian/control: Add sysv-rc (>= 2.86.ds1-14.1ubuntu2) dependency.
      + debian/cupsys.postinst: Remove obsolete rc.d links.
      + debian/rules: Use 'multiuser' update-rc.d mode.
    - debian/control: Drop libcupsys2-gnutls10 and cupsys-dbg packages.
    - Run cupsd as system user 'cupsd' instead of root to confine impact of
      security vulnerabilities:
      + cupsys{,-client}.postinst: Set up cupsys user and put it into the
        appropriate groups.
      + debian/cupsys.init.d: Set up proper permissions of log files.
      + debian/cupsys.init.d: Disable 'reload', force-reload does restart,
        since cupsd cannot reload as non-root.
      + debian/cupsys.logrotate: Own the log files to cupsys:lpadmin.
      + Add debian/patches/ubuntu-external-pam-helper.dpatch: Helper program
        cups-check-pam-auth which performs PAM authentication and returns the
        status as exit code.
      + debian/cupsys.files: Install cups-check-pam-auth.
      + debian/cupsys.postinst: Set permissions of cups-check-pam-auth to
        cupsys:shadow 2754.
      + debian/rules: Configure with --enable-privilege-dropping.
      + debian/rules: Install lpd backend suid root so that it can bind to a
        privileged port.
    - Support user-installed PPDs:
      - debian/cupsys.dirs: Add usr/share/ppd/custom.
      - debian/cupsys.init.d: Set up this dir as root:lpadmin 03775.
    - debian/patches/14_dont_force_ssl.dpatch: Do not require SSL for the web
      frontend since gnome-cups-manager does not cope with that.
    - debian/patches/58_cupsd.conf-AllowLocal.dpatch: Allow access to local
      ethernet by default. This just affects the ACL, for actually enabling
      access cupsd needs to be switched to not only listen on localhost. (So
      this does not need to be configured in two different places).
    - debian/patches/ubuntu-default-error-policy-retry-job.dpatch: Retry a
      failed job instead of stopping the print queue.
    - debian/patches/ubuntu-disable-browsing.dpatch: Disable browsing by
      default.
    - Changed dependency in cupsys-bsd for netbase into update-inetd.
    - Removed obsolete emacs config settings at the end of changelog.

  * Added directories and links for PPD files according to the FHS
    extension for a distribution-independent printer driver location:
    http://lists.freestandards.org/pipermail/printing-architecture/2006/001512.html
    (Debian bug #408154).

cupsys (1.2.7-2) unstable; urgency=high

  [ Kenshi Muto ]
  * Applied upstream patches to fix some (include RC) bugs as dpatch style:
    - STR2106: Raw PBM files did not print correctly
    - STR2111: The PostScript filter did not properly output
      document setup commands for reversed output (closes: Bug#403703)
    - STR2117: The scheduler did not parse IPv6 netmask properly
    - STR2121: cupsDoAuthentication() did not translate the password
      prompt
    - STR2123: The backends incorrectly used STATUS:
      media-tray-empty-error messages for out-of-paper conditions
    - STR2133: httpGetLength2() did not handle error messages without
      content correctly
    - STR2135: cupsMarkOptions() did not handle the
      multiple-document-handling option
    - STR2137: Collated output produced by the PostScript filter could
      lose some options
    - STR2144: job-hold-until with time values for the next day would
      be held for 60 days
  * 67_printcap: Add Printcap/PrintcapFormat/PrintcapGUI variables to
    cupsd.conf file. (closes: #401981)
  * cupsys makes /var/run/cups/certs. Although CUPS daemon can make
    it automatically, the daemon logs an warning.
  * 68_edit-config: Provide same cupsd.conf as initial package
    installation.

 -- Till Kamppeter <email address hidden>   Fri, 26 Jan 2007 13:22:06 +0000