Path: utzoo!censor!geac!torsqnt!news-server.csri.toronto.edu!cs.utexas.edu!swrinde!zaphod.mps.ohio-state.edu!sdd.hp.com!hplabs!otter.hpl.hp.com!hpltoad!jperry!jp
From: jp@hplb.hpl.hp.com (Julian Perry)
Newsgroups: comp.sys.hp
Subject: Re: lp can't print under hpux 7.0!!!
Keywords: lp, suid
Message-ID: <1990Jul05.122042.4007@hplb.hpl.hp.com>
Date: 5 Jul 90 12:20:42 GMT
References: <360@cmic.UUCP>
Sender: news@hplb.hpl.hp.com (Usenet News Administrator)
Reply-To: jp@hplb.hpl.hp.com
Organization: Hewlett-Packard Labs, Bristol, UK
Lines: 37

In article <360@cmic.UUCP>, garvey@cmic.UUCP (Joe Garvey) writes:
|> Try the following:
|> 
|> $ su lp
|> $ lp /etc/motd
|> 
|> It will fail under HP-UX 7.0. Lp (the user) can't submit print jobs.
Actually
|> that's not true. Lp can submit a print job, it will just error out when
|> execution is attempted.
|> 
|> Does anyone know how this wonderful state of affairs occurred? Is there
|> a work around?

Yep - it's a known bug.  A workaround is to do the following:
	cpset /usr/bin/lp /usr/spool/lp/lp.bin 4555 lp bin
and when logged in as lp use the /usr/spool/lp/lp.bin binary rather than
the /usr/bin/lp version.

Fixed versions of the /usr/bin/lp binary may be available - contact your SE.

|> What's even more confusing is /usr/bin/lp is suid root! Root should be able
|> to do what ever root wants.

It happens because lp gets confused as to who it should be at any given point
(it does some uid hopping to make files have the right permissions etc) and
tries the wrong things as the wrong uid!

I believe it's fixed for the next release.

Jules
--
E-MAIL:         jp@hplb.hpl.hp.com || jp@hpl.hp.co.uk
IN-REAL-LIFE:   Julian Perry
ORGANISATION:   Hewlett-Packard Laboratories, Bristol
ADDRESS:        Filton Road, Stoke Gifford, Bristol, England, BS12 6QZ
TELEPHONE:      +44 272 799910 x 24019