https://bugzilla.novell.com/show_bug.cgi?id=860481 https://bugzilla.novell.com/show_bug.cgi?id=860481#c1 Christoph Wurst changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |wurst.christoph@gmail.com --- Comment #1 from Christoph Wurst 2014-01-25 17:20:30 UTC --- I fixed it by changing /usr/lib/systemd/system/cups.socket from [Unit] Description=CUPS Printing Service Sockets [Socket] ListenStream=/var/run/cups/cups.sock ListenStream=127.0.0.1:631 ListenStream=[::1]:631 ListenDatagram=127.0.0.1:631 ListenDatagram=[::1]:631 BindIPv6Only=ipv6-only [Install] WantedBy=sockets.target to: [Unit] Description=CUPS Printing Service Sockets [Socket] ListenStream=/var/run/cups/cups.sock ListenStream=127.0.0.1:631 ListenDatagram=127.0.0.1:631 BindIPv6Only=ipv6-only [Install] WantedBy=sockets.target Those two lines were added after updating cups from 1.5.4-12.1.3 to 1.5.4-12.4.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=860481 https://bugzilla.novell.com/show_bug.cgi?id=860481#c3 Sebastian Kuhne changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sebastiankuhne1@googlemail. | |com --- Comment #3 from Sebastian Kuhne 2014-01-26 19:48:58 UTC --- Hi Christoph, first of all, I have experienced the same issue you observed. I tried your fix and changed /usr/lib/systemd/system/cups.socket according to your proposal (1:1). Unfortunately, this was not successful. The printer is not shared in the network. Hope we get a regular fix soon. Best regards Sebastian (In reply to comment #1)

I fixed it by changing /usr/lib/systemd/system/cups.socket from

[Unit] Description=CUPS Printing Service Sockets

[Socket] ListenStream=/var/run/cups/cups.sock ListenStream=127.0.0.1:631 ListenStream=[::1]:631 ListenDatagram=127.0.0.1:631 ListenDatagram=[::1]:631 BindIPv6Only=ipv6-only

[Install] WantedBy=sockets.target

to:

[Unit] Description=CUPS Printing Service Sockets

[Socket] ListenStream=/var/run/cups/cups.sock ListenStream=127.0.0.1:631 ListenDatagram=127.0.0.1:631 BindIPv6Only=ipv6-only

[Install] WantedBy=sockets.target

Those two lines were added after updating cups from 1.5.4-12.1.3 to 1.5.4-12.4.1

-- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=860481 https://bugzilla.novell.com/show_bug.cgi?id=860481#c4 Johannes Meixner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsmeix@suse.com Component|Printing |Security Platform|x86-64 |All AssignedTo|jsmeix@suse.com |security-team@suse.de Summary|Printer sharing stopped |Printer sharing stopped |working after installing |working after installing |cups-1.5.4-12.4.1 |security fix for bnc#857372 QAContact|jsmeix@suse.com |qa-bugs@suse.de --- Comment #4 from Johannes Meixner 2014-01-28 12:43:39 CET --- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch is the "right" security fix for bnc#857372 according to what was discusseed there, see in particular https://bugzilla.novell.com/show_bug.cgi?id=857372#c18 I think it is the intended purpose that with this fix it must no longer "just work" without explicit settings by the admin to make the cupsd accessible via outer network because otherwise it would be insecure. I think the security people together with the systemd people should try to find a secure and usable way how normal users can use the cupsd, see also bnc#860331 I think the current situation is a dilemma between security and "make it all just work out of the box" that I cannot solve, see https://bugzilla.novell.com/show_bug.cgi?id=857372#c19 According to https://bugzilla.novell.com/show_bug.cgi?id=860331#c1 I also change the bugzilla component to "Security" here. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.