Bug 132756

Summary:	foomatic-rip's system call to gs fails with a taint error when setuid perl is installed
Product:	Gentoo Linux	Reporter:	Monty Charlton <monty>
Component:	[OLD] Printing	Assignee:	Printing Team <printing>
Status:	RESOLVED NEEDINFO
Severity:	normal
Priority:	High
Version:	2006.0
Hardware:	x86
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Monty Charlton 2006-05-08 21:27:42 UTC

When I print with IPP/Cups (from Windows only, not Linux...don't ask me why), I get the following error in the cups error_log file:
Insecure dependency in system while running setuid at /usr/lib/cups/filter/foomatic-rip line 3463.


foomatic-rip is issuing a system command on a setuid perl on that line of code.

Adding
($commandline =~ m/^(.*)$/) && ($commandline=$1);
just above the system call (line 3462 of foomatic-rip) fixes the problem fine. Perhaps it is not the best solution, but it does do the job.

Incidentally, I had to install Perl setuid root to get spamd to work with qmail -- a totally separate, painfully long problem to solve. :)

Thanks.
Monty

Comment 1 Stefan Schweizer (RETIRED) gentoo-dev

2006-06-01 15:46:08 UTC

is it an error or a warning? In cups-1.2 the backends are no longer root. You can try that to circumvent it.
Also the perl line makes no sense for me. It does nothing?

Please tell me what you are trying to achieve there ..

REOPEN if you are still interested