ilyakooo0/nixpkgs
1
0
Fork 0
mirror of https://github.com/ilyakooo0/nixpkgs.git synced 2024-11-12 03:56:17 +03:00
Code Issues Projects Releases Wiki Activity

* Run CUPS' external programs in the "lp" group so that they can

Browse Source 
access printer devices in /dev.  Also use a "cups" user instead of
  "nobody".

svn path=/nixos/trunk/; revision=23003
This commit is contained in:
Eelco Dolstra 2010-08-06 14:52:09 +00:00
parent 6c8c1f935a
commit ea49707f85
2 changed files with 19 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
modules/misc/ids.nix
View File

@ -55,6 +55,7 @@ in
osgi = 34; osgi = 34;
sabnzbd = 33; sabnzbd = 33;
tor = 35; tor = 35;
cups = 36;
# When adding a uid, make sure it doesn't match an existing gid. # When adding a uid, make sure it doesn't match an existing gid.
nixbld = 30000; # start of range of uids nixbld = 30000; # start of range of uids

16
modules/services/printing/cupsd.nix
View File

@ -102,11 +102,18 @@ in
config = mkIf config.services.printing.enable { config = mkIf config.services.printing.enable {
users.extraUsers = singleton
{ name = "cups";
uid = config.ids.uids.cups;
group = "lp";
description = "CUPS printing services";
};
environment.systemPackages = [ cups ]; environment.systemPackages = [ cups ];
services.dbus.packages = [ cups ]; services.dbus.packages = [ cups ];
# cups uses libusb to talk to printers, and does not use the # Cups uses libusb to talk to printers, and does not use the
# linux kernel driver. If the driver is not in a black list, it # linux kernel driver. If the driver is not in a black list, it
# gets loaded, and then cups cannot access the printers. # gets loaded, and then cups cannot access the printers.
boot.blacklistedKernelModules = [ "usblp" ]; boot.blacklistedKernelModules = [ "usblp" ];
@ -167,6 +174,13 @@ in
TempDir ${cfg.tempDir} TempDir ${cfg.tempDir}
# User and group used to run external programs, including
# those that actually send the job to the printer. Note that
# Udev sets the group of printer devices to `lp', so we want
# these programs to run as `lp' as well.
User cups
Group lp
Browsing On Browsing On
BrowseOrder allow,deny BrowseOrder allow,deny
BrowseAllow @LOCAL BrowseAllow @LOCAL