Bug#858541: system-config-printer: Printer propertys accessible without authentication

[David Rabel]

Package: system-config-printer
Version: 1.5.7-3
Severity: normal

Dear Maintainer,

I can access the printer's properties by doubleklicking it, although it is
locked. This access does not ask me for any authentication, while unlocking the
printer does.

This seems to be a security issue.

Yours
  David



-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages system-config-printer depends on:
ii  gir1.2-gdkpixbuf-2.0          2.36.5-2
ii  gir1.2-glib-2.0               1.50.0-1+b1
ii  gir1.2-gtk-3.0                3.22.8-1
ii  gir1.2-notify-0.7             0.7.7-1+b1
ii  gir1.2-packagekitglib-1.0     1.1.5-1
ii  gir1.2-pango-1.0              1.40.3-3
ii  python3-cups                  1.9.73-1
ii  python3-cupshelpers           1.5.7-3
ii  python3-dbus                  1.2.4-1+b1
ii  python3-gi                    3.22.0-2
pn  python3:any                   <none>
ii  system-config-printer-common  1.5.7-3

Versions of packages system-config-printer recommends:
ii  cups-pk-helper              0.2.6-1+b1
ii  python3-smbc                1.0.15.6-1
ii  system-config-printer-udev  1.5.7-3+b1

Versions of packages system-config-printer suggests:
pn  gnome-software  <none>

-- no debconf information