[tclug-list] A question about printing'

Sat Mar 1 16:37:33 CST 2014

I sure have learned some stuff today. I am going to have to work on understanding permissions alot. 

So what kindof relevance does any of the 'printers on board wireless dhcp/ip settings have at this point'? Is that mainly to setup the printer for a Windows wireless printing situation?

Date: Sat, 1 Mar 2014 15:58:37 -0600
From: david.wagle at gmail.com
To: tclug-list at mn-linux.org
Subject: Re: [tclug-list] A question about printing'

Because you have it configured to share that printer to the network

On Sat, Mar 1, 2014 at 3:48 PM, paul g <pj.world at hotmail.com> wrote:

Another question I have for you is about the 'http://localhost:631/admin/' command.

When I enter that command into the browser on the pc upstairs 'which is wireless on a DHCP networked router'. The Brother MFC-295CN printer shows up 'which is connected via USB cable to the pc downstairs 'which is also connected wirelessly to the router using DHCP. Why the heck is that anyways?

Thank you for caring and your help.

Date: Sat, 1 Mar 2014 13:52:54 -0600
From: david.wagle at gmail.com
To: tclug-list at mn-linux.org

Subject: Re: [tclug-list] A question about printing'

Paul - try this:

Open up a terminal
mkdir a play space: $mkdir ~/testdir
go there: $cd ~/testdir

create a file: $touch test

Look at it: $ls -l test

-rw------- 1 david users 0 Mar  1 13:45 test

play with chmod: $chmod 110 test
and see what it does: $ls -l test

---x--x--- 1 david users 0 Mar  1 13:45 test

try other values: $ chmod 421 test
and see what they do: $ ls -l test

-r---w---x 1 david users 0 Mar  1 13:45 test

keep playing around till you understand how the number relate to permissions. 

On Sat, Mar 1, 2014 at 1:41 PM, paul g <pj.world at hotmail.com> wrote:

Very Very solid advice if I do say so myself. This is a bit over my head but I will try to figure it out. Thanks for all your help.

Date: Sat, 1 Mar 2014 13:20:27 -0600

From: david.wagle at gmail.com
To: tclug-list at mn-linux.org
Subject: Re: [tclug-list] A question about printing'

I should add -- unless you have reason to do so, don't change the group ownership. Rather, limit the permissions to that group.

On Sat, Mar 1, 2014 at 1:09 PM, David Wagle <david.wagle at gmail.com> wrote:

OK -- so understanding the numbers on modes:

There are three sets of permissions, those for the OWNER, the GROUP and WORLD. 

Each permission set is controlled by a bit string that is 4 bits long. 

If the first bit is a 1, then that group has read permissions. 

A bit string (base 2) of 0001 has a decimal value of 1 because 0x2^3 + 0x2^2 + 0x2^1 + 1x2^0 = 1 and corresponds to execute permission

A bit string (base 2) of 0010 has a decimal value of 2 because 0x2^3 + 0x2^2 + 1x2^1 + 0x2^0 = 2 and corresponds to write permission

A bit string (base 2) of 0100 has a decimal value of 4 because 0x2^3 + 1x2^2 + 0x2^1 + 0x2^0 = 4 and corresponds to read permission

The fourth bit is used for special permissions like "the sticky bit" and is really beyond the basics. 

Now, because the values of 1, 2 and 4 are bit-independent, any combination of those values is the equivilant of 'OR'ing the bit strings. 

So, if we want read and write permission we want both 4 and 2. That is we want the bit mask to be 011. Which is 0x2^3 + 1x2^2 + 1x2^1 + 0x2^0 = 6. Which is what you get if you add 4 + 2.

So a mask of, say 751 is RWX for Owner, R+X for Group and R for World. 

As for which link to follow --- without your box in front of me to troubleshoot, I really can't say "here's what to do."

However, I'd start with setting your library to minimal permission since what you're getting is a permissions error. That would be at least as strict as 660.

I would also then check that your users are in the same group as your print service -- which is usually 'wheel,' but not always. 

On Sat, Mar 1, 2014 at 12:35 PM, paul g <pj.world at hotmail.com> wrote:

David thanks for the great link and advice. 

I will reset world with command?      'chown root:root brfaxfilter'  

I will then     'chmod go+x'

????

Can you please recommend which area of the link you sent I should possibly follow? 

There are chmod 555 and 700 's etc making me confused.  

I will restart 'cups' using the command 'sudo service cups restart'

Thanks alot for your help with this.

Date: Sat, 1 Mar 2014 00:11:02 -0600
From: david.wagle at gmail.com
To: tclug-list at mn-linux.org

Subject: Re: [tclug-list] A question about printing'

Looks like you're not the only one to run into this: 

http://ubuntuforums.org/archive/index.php/t-1368410.html

On Sat, Mar 1, 2014 at 12:06 AM, David Wagle <david.wagle at gmail.com> wrote:

Also - you probably have to restart CUPS to have it re-read the library. 

On Sat, Mar 1, 2014 at 12:03 AM, David Wagle <david.wagle at gmail.com> wrote:

Paul - again, there's no reason for world permissions to be anything. Anyone authorized to use the service should be in the same group as the service. 

On Fri, Feb 28, 2014 at 7:36 PM, paul g <pj.world at hotmail.com> wrote:

Again I am sorry to repost BUT the following should be noted:

I am using a majic jack based telephone line system 'VOIP',

I have adjusted the MFC-295CN to 9600 baud rate 'fax',

I do of course have a high speed ethernet connection,

Your help is always appreciated.

Thank you for your time,

Paul G

From: pj.world at hotmail.com

To: tclug-list at mn-linux.org
Date: Fri, 28 Feb 2014 19:16:31 -0600
Subject: Re: [tclug-list] A question about printing'

I just preformed a 'chmod' command and permissions NOW look like this for the file:

located under: deb at deb-desktop /usr/lib/cups/filter $ 

-rwxrw-rw-  1 root deb  5.2K Nov 24  2005 brfaxfilter

command I entered was:

sudo chmod go-x  brfaxfilter

to remove execute.

rebooted the machine same thing still shows up in Cups.

Date: Fri, 28 Feb 2014 17:58:10 -0600
From: david.wagle at gmail.com

To: tclug-list at mn-linux.org
Subject: Re: [tclug-list] A question about printing'

ls -l of /usr/lib/cups/filter/brfaxfilter 

Looks like you have a sticky bit set and have it 'rwx' for all. It really only probably needs to be 'rw-' for owner and group, and then any user who is allowed to use it  should be in that group. There should be no need for a sticky bit to be set. 

On Fri, Feb 28, 2014 at 5:51 PM, paul g <pj.world at hotmail.com> wrote:

I have successfully installed the 'CUPS' and the appropriate drivers for a model 'MFC-295CN' Brother printer. 

The machine is running kernel: Linux deb-desktop 3.2.0-59-generic #90-Ubuntu SMP Tue Jan 7 22:47:22 UTC 2014 i686 i686 i386 GNU/Linux

I can print documents properly as well as scan them using xsane. Test page printout work great! also 'full color'.

My issue is with the accompanied 'BRFAX' which I have installed also uses 'Cups' is as follows: 

When I click on 'BRFAX' inside 'Cups'
Reports an error:

The error is as follows: 'shown in Cups'

Stopped - File "/usr/lib/cups/filter/brfaxfilter" has insecure permissions (0100777/uid=0/gid=0).

deb at deb-desktop /usr/lib/cups/filter $ ls -lah
-rwxrwxrwx  1 root root 5.2K Nov 24  2005 brfaxfilter

dpkg -l | grep Brother

ii  brmfcfaxcups                           1.0.0-2                                 Brother MFC/FAX fax share function driver

ii  brmfcfaxlpd                            1.0.0-2                                 Brother MFC-FAX LPD driver
ii  brother-udev-rule-type1                1.0.0-1                                 Brother udev rule type 1

ii  brscan-skey                            0.2.4-1                                 Brother Linux scanner S-KEY tool
ii  brscan3                                0.2.11-4                                Brother Scanner Driver

ii  mfc295cncupswrapper                    1.1.3-1                                 Brother CUPS Inkjet Printer Definitions
ii  mfc295cnlpr                            1.1.3-1                                 Brother lpr Inkjet Printer Definitions

ii  printer-driver-ptouch                  1.3-3ubuntu0.1                          printer driver Brother P-touch label printers

Any ideas on where to go from here?

Thank You,

Paul G

_______________________________________________