Why Are the CUPS LPR Commands Not SETUID Root?

Created at 10:58 Jul 23, 2004 by mike, last modified at 10:58 Jul 23, 2004

The LPD protocol forces clients to reserve a privileged port to send print files. Since privileged ports require root access, the lpr, lpq, lprm, and lpc programs are setuid root.

The CUPS software uses the IPP protocol which does not have this requirement. Therefore, all LPR client programs can be regular executables (no setuid to root) which poses fewer security risks.

Download  ·  Home Page  ·  Listing


Comments

Submit Comment