Date: Wed, 17 Sep 2014 08:21:17 +0200 From: Hans Petter Selasky <hps@selasky.org> To: Andriy Gapon <avg@FreeBSD.org>, freebsd-stable List <stable@FreeBSD.org>, FreeBSD Current <freebsd-current@FreeBSD.org> Cc: freebsd-desktop@FreeBSD.org Subject: Re: Fwd: usb printer vs cups Message-ID: <5419285D.8020909@selasky.org> In-Reply-To: <5419238E.8050708@FreeBSD.org> References: <54133325.9070302@FreeBSD.org> <5419238E.8050708@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.
--------------040608000705010201090203
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
On 09/17/14 08:00, Andriy Gapon wrote:
>
> Soliciting help.
>
> -------- Forwarded Message --------
>
>>From my experience I think that cupsd executes backend tools with all uids and
> gids set to cups and no supplementary groups. In the case of USB printers the
> backends need to access /dev/usbctl and /dev/usb/foobar that corresponds to a
> printer. That means that the access to those devices must be somehow granted to
> cups:cups.
> How do people solve this? What kind of permissions / configuration do you use?
>
> P.S.
> Maybe I over-generalized the issue to all USB printers. My personal experience
> is with an HP printer handled by hplip / hplip-plugin.
>
Hi,
The /usr/ports/print/cups-base should be updated.
The pkg-message should not say that:
# FreeBSD 8.x
add path 'usb*' mode 0770 group cups
add path 'ugen*' mode 0660 group cups
add path 'usb/0.2.*' mode 0660 group cups
Is needed. This is wrong.
Instead make cups-base install the attached devd configuration file in
/usr/local/etc/devd/ which does the needed chown for printers only.
--HPS
--------------040608000705010201090203
Content-Type: text/plain; charset=us-ascii;
name="cups.conf.in"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename="cups.conf.in"
# Generic USB printer devices
notify 100 {
match "system" "USB";
match "subsystem" "INTERFACE";
match "type" "ATTACH";
match "intclass" "0x07";
match "intsubclass" "0x01";
match "intprotocol" "(0x01|0x02|0x03)";
action "chown cups:cups /dev/$cdev";
};
--------------040608000705010201090203--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5419285D.8020909>