It may not be everywhere yet, but it isn’t Ubuntu-only) and it was decided that this was sufficient to no longer just give away cups-control to anyone who asked for it. Then, gnome-software/snap-store added installation prompts (and no, snap-store is not Ubuntu-only- it is a snap. We’ve actually been consistent at any given point in time: at first there were no install prompts, so we tended to grant auto-connect. It should also be noted that cups has a pretty terrible security record so always auto-connecting cups-control could lead to privilege escalation if new vulnerabilities are found in cups. It is totally surprising that a snap that needs to print is allowed to configure printers on the system. I think people are forgetting that the thinking on auto-connection is evolving as we go along.
We should auto-connect the things that make sense to auto-connect. This reasoning leads to auto-connecting everything. Perhaps inkscape can be made to use it instead? cupsd could also be modified for prompting/mediation, but in this case Portals is likely the path forward.
I’m not sure if the Printing portal is available yet (perhaps could comment), but that is already allowed via the desktop interface which is autoconnected. As for adding ‘cups-user’, we can’t really add that because we can’t easily take permissions away from a snap without causing regressions (some snap somewhere would use cups-user and really need cups-control this is why we only have cups-control now). Since we’ve added install prompts, these two have in the past been deemed sufficient for use cases such as gimp and inkscape.
There is already the ability to connect the interface at install time when using gnome-software/snap-store and a snap can detect if it has the ability to print and let the user know there is an extra step. cups-control unfortunately grants access to the socket which on a typical single user system grants admin privileges for printer configuration, which is more than intended and surprising when the application only needs to print. The problem with “would I reasonably ever print” is that it would apply to anything that plugs cups-control and all snaps have elevated permissions.
0 kommentar(er)
