Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 10 Dec 2002 08:52:06 -0600 (CST)
From:      Peter Elsner <peter@spxgate.servplex.com>
To:        FreeBSD-gnats-submit@FreeBSD.org
Subject:   misc/46163: lpc problem.  Only root can modify despite man page info.
Message-ID:  <200212101452.gBAEq6Xw088039@spxgate.servplex.com>

next in thread | raw e-mail | index | archive | help

>Number:         46163
>Category:       misc
>Synopsis:       lpc problem.  Only root can modify despite man page info.
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Dec 10 06:40:01 PST 2002
>Closed-Date:
>Last-Modified:
>Originator:     Peter Elsner <peter@servplex.com>
>Release:        FreeBSD 4.7-STABLE i386
>Organization:
ServPlex Corporation
>Environment:
System: FreeBSD spxgate.servplex.com 4.7-STABLE FreeBSD 4.7-STABLE #0: Wed Nov 20 07:48:39 CST 2002 root@spxgate.servplex.com:/home/obj/usr/src/sys/SPXGATE i386

>Description:

I think lpc might have a small bug...

According to the man page, lpc is a privlidged command...

?Privileged command  you must be a member of group "operator" or root
to
execute this command

So I added a handful of users to the 'operator' group.  This way they
should be able to send lpc commands to the printers.  This works... 
Each user was able to disable/enable, down/up printers etc... no
problem, until root disabled and then re-enabled a printer.  Now each
person can no longer disable or re-enable printers.  Only root can...

So something changes when root disabled and enables a printer, so that
no one else afterwards (other than root) can disable or enable a
printer.

>How-To-Repeat:

Add yourself to the operator group and issue an lpc disable printername
Then issue an lpc enable printername
This works fine, now su to root, and issue the same 2 commands, again it 
works fine, now exit back to your user account, and issue the commands
again.  This time, you'll find out that it doesn't work any longer, only 
root can now disable/enable printername from this point on.

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200212101452.gBAEq6Xw088039>