Red Hat Bugzilla – Bug 168085
It is not desirable for a daemon to create a directory under /var/cache. The package should provide such directories
Last modified: 2007-11-30 17:11:13 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (compatible; Konqueror/3.4; Linux) KHTML/3.4.2 (like Gecko)
Description of problem:
cupsd in some situations will create the directory /var/cache/foomatic.
For security reasins it's preferable if we can deny such access, if we have
two daemons permitted to create such directories then if one was compromised
then it could be used for a trivial DOS attack against the other.
If the package provides the directory /var/cache/foomatic then SE Linux rules
can deny the creation of such directories.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
Cause XML files in /usr/share/foomatic/db to be read.
Actual Results: Daemon attempted to create the directory in question and SE Linux denied it.
It's nothing to do with cupsd. system-config-printer creates this directory.
I've made the change in foomatic.spec. Fixed in CVS.