https://bugzilla.novell.com/show_bug.cgi?id=857372 https://bugzilla.novell.com/show_bug.cgi?id=857372#c0 Summary: systemd makes cups.socket listening on 0.0.0.0 Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: nettezzaumanaa@gmail.com QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0 hello suse ppl, first off: i'm reporting bug after several years, i promise, i'll go better :) . now to bugreport: default suse cups setup was always set that cupsd was listening on localhost:631 .. in suse 13.1 systemd creates for cups sockets (and whatver else) and cupsd is started just when something accesses these sockets or listening "init" service as it is recognized by netstat .. now systemd listens on both tcp/udp 0.0.0.0/:::1 which seems wrong to me .. i've always fixed systemd cups.socket service that it look like this: # netstat -tulnp | grep 631 tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 1/init tcp 0 0 ::1:631 :::* LISTEN 1/init udp 0 0 127.0.0.1:631 0.0.0.0:* 1/init udp 0 0 ::1:631 :::* 1/init # lsof -i | egrep ipp systemd 1 root 15u IPv4 8692 0t0 TCP localhost:ipp (LISTEN) systemd 1 root 16u IPv6 8693 0t0 TCP localhost:ipp (LISTEN) systemd 1 root 21u IPv4 8694 0t0 UDP localhost:ipp systemd 1 root 22u IPv6 8695 0t0 UDP localhost:ipp cupsd 1650 root 4u IPv4 8692 0t0 TCP localhost:ipp (LISTEN) cupsd 1650 root 5u IPv6 8693 0t0 TCP localhost:ipp (LISTEN) cupsd 1650 root 6u IPv4 8694 0t0 UDP localhost:ipp cupsd 1650 root 7u IPv6 8695 0t0 UDP localhost:ipp adjustements need to be done in /usr/lib/systemd/system/cups.socket # cat /usr/lib/systemd/system/cups.socket [Unit] Description=CUPS Printing Service Sockets [Socket] ListenStream=/var/run/cups/cups.sock ListenStream=127.0.0.1:631 ListenStream=[::1]:631 ListenDatagram=127.0.0.1:631 ListenDatagram=[::1]:631 BindIPv6Only=ipv6-only [Install] WantedBy=sockets.target Please consider changing default (less secure) cups.socket systemd service .. regards, daniel Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.