From owner-freebsd-stable@FreeBSD.ORG Wed Sep 17 06:57:21 2014 Return-Path: Delivered-To: stable@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C1DEF699; Wed, 17 Sep 2014 06:57:21 +0000 (UTC) Received: from theravensnest.org (theraven.freebsd.your.org [216.14.102.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "cloud.theravensnest.org", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 871B3F4B; Wed, 17 Sep 2014 06:57:20 +0000 (UTC) Received: from [192.168.0.7] (cpc14-cmbg15-2-0-cust307.5-4.cable.virginm.net [82.26.1.52]) (authenticated bits=0) by theravensnest.org (8.14.9/8.14.9) with ESMTP id s8H6vFed008803 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 17 Sep 2014 06:57:17 GMT (envelope-from theraven@FreeBSD.org) X-Authentication-Warning: theravensnest.org: Host cpc14-cmbg15-2-0-cust307.5-4.cable.virginm.net [82.26.1.52] claimed to be [192.168.0.7] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) Subject: Re: usb printer vs cups From: David Chisnall In-Reply-To: <5419238E.8050708@FreeBSD.org> Date: Wed, 17 Sep 2014 07:57:10 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <54133325.9070302@FreeBSD.org> <5419238E.8050708@FreeBSD.org> To: Andriy Gapon X-Mailer: Apple Mail (2.1878.6) Cc: freebsd-stable List , FreeBSD Current , freebsd-desktop@FreeBSD.org X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Sep 2014 06:57:21 -0000 There are a couple of similar issues currently. The other one that = comes to mind is that every X11 application that needs to use OpenGL (or = similar) must open /dev/dri/{something}, but the default permissions = only permit root. The correct solution is probably to ship a devfs.conf that puts these = devices in the a sensible group. For USB printers, we should probably = have a printers group and make cupsd run with that group (or set the GUI = of cups and printers to the same number if that's too difficult). =20 David On 17 Sep 2014, at 07:00, Andriy Gapon wrote: >=20 > Soliciting help. >=20 > -------- Forwarded Message -------- >=20 > =46rom my experience I think that cupsd executes backend tools with = all uids and > gids set to cups and no supplementary groups. In the case of USB = printers the > backends need to access /dev/usbctl and /dev/usb/foobar that = corresponds to a > printer. That means that the access to those devices must be somehow = granted to > cups:cups. > How do people solve this? What kind of permissions / configuration do = you use? >=20 > P.S. > Maybe I over-generalized the issue to all USB printers. My personal = experience > is with an HP printer handled by hplip / hplip-plugin. > --=20 > Andriy Gapon >=20 >=20 > _______________________________________________ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to = "freebsd-current-unsubscribe@freebsd.org"