%global use_alternatives 1

%global lspp 1

# {_exec_prefix}/lib/cups is correct, even on x86_64.

# It is not used for shared objects but for executables.

# It's more of a libexec-style ({_libexecdir}) usage,

# but we use lib for compatibility with 3rd party drivers (at upstream request).

%global cups_serverbin %{_exec_prefix}/lib/cups

Summary: CUPS printing system

Name: cups

Epoch: 1

Version: 1.6.3

Release: 43%{?dist}

License: GPLv2

Group: System Environment/Daemons

Url: http://www.cups.org/

Source: http://www.cups.org/software/%{version}/cups-%{version}-source.tar.bz2

# Pixmap for desktop file

Source2: cupsprinter.png

# socket unit for cups-lpd service

Source3: cups-lpd.socket

# cups-lpd service unit configuration

Source4: cups-lpd@.service

# Logrotate configuration

Source6: cups.logrotate

# Backend for NCP protocol

Source7: ncp.backend

Source8: macros.cups

Patch1: cups-no-gzip-man.patch

Patch2: cups-system-auth.patch

Patch3: cups-multilib.patch

Patch4: cups-dbus-utf8.patch

Patch5: cups-banners.patch

Patch6: cups-serverbin-compat.patch

Patch7: cups-no-export-ssllibs.patch

Patch8: cups-direct-usb.patch

Patch9: cups-lpr-help.patch

Patch10: cups-peercred.patch

Patch11: cups-pid.patch

Patch12: cups-eggcups.patch

Patch13: cups-driverd-timeout.patch

Patch14: cups-strict-ppd-line-length.patch

Patch15: cups-logrotate.patch

Patch16: cups-usb-paperout.patch

Patch17: cups-res_init.patch

Patch18: cups-filter-debug.patch

Patch19: cups-uri-compat.patch

Patch20: cups-str3382.patch

Patch21: cups-0755.patch

Patch22: cups-hp-deviceid-oid.patch

Patch23: cups-dnssd-deviceid.patch

Patch24: cups-ricoh-deviceid-oid.patch

Patch25: cups-systemd-socket.patch

Patch26: cups-lpd-manpage.patch

Patch27: cups-avahi-address.patch

Patch28: cups-usblp-quirks.patch

Patch29: cups-enum-all.patch

Patch30: cups-stringpool-setprinterattr.patch

Patch31: cups-dymo-deviceid.patch

Patch32: cups-use-ipp1.1.patch

Patch33: cups-no-gcry.patch

Patch34: cups-avahi-no-threaded.patch

Patch35: cups-gz-crc.patch

Patch36: cups-ipp-multifile.patch

Patch37: cups-full-relro.patch

Patch38: cups-web-devices-timeout.patch

Patch39: cups-synconclose.patch

Patch40: cups-str4500.patch

Patch41: cups-dbus-notifier.patch

Patch42: cups-usb-timeout.patch

Patch43: cups-str4326.patch

Patch44: cups-str4327.patch

Patch45: cups-CVE-2014-2856.patch

Patch46: cups-str4380.patch

Patch47: cups-colord-interface.patch

Patch48: cups-nodatadelay.patch

Patch49: cups-str4440.patch

Patch50: cups-error-policy-manpage.patch

Patch51: cups-CVE-2014-3537.patch

Patch52: cups-CVE-2014-5029-5030-5031.patch

Patch53: cups-str4461.patch

Patch54: cups-str4475.patch

Patch55: cups-failover-backend.patch

Patch56: cups-str4609.patch

Patch57: cups-str4551.patch

Patch58: cups-str4476.patch

Patch59: cups-str4591.patch

Patch60: cups-str4646.patch

Patch61: cups-str4648.patch

Patch62: cups-start-service.patch

Patch63: cups-163-enotif.patch

Patch64: cups-163-fdleak.patch

Patch65: cups-state-message.patch

Patch66: cups-1.6.3-resolv_reload.patch

Patch67: cups-1.6.3-legacy-iso88591.patch

Patch68: cups-1.6.3-ypbind.patch

Patch69: cups-1.6.3-overriden-h.patch

Patch70: cups-net-backends-etimedout-enotconn.patch

Patch71: cups-1.6.3-tlsv12.patch

Patch72: cups-1.6.3-page-count.patch

Patch73: 0001-Fix-stuck-multi-file-jobs-Issue-5359-Issue-5413.patch

Patch74: 0001-The-scheduler-now-uses-the-getgrouplist-function-whe.patch

Patch75: cups-dont-send-http-options-field.patch

Patch76: cups-CVE-2018-4180.patch

Patch77: cups-CVE-2018-4700.patch

Patch78: cups-unlink-filename.patch

Patch100: cups-lspp.patch

Requires: %{name}-filesystem = %{epoch}:%{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

Requires: %{name}-client%{?_isa} = %{epoch}:%{version}-%{release}

Provides: cupsddk cupsddk-drivers

BuildRequires: pam-devel pkgconfig

BuildRequires: openssl-devel libacl-devel

BuildRequires: openldap-devel

BuildRequires: libusb1-devel

BuildRequires: krb5-devel

BuildRequires: avahi-devel

BuildRequires: systemd, systemd-devel

BuildRequires: dbus-devel

BuildRequires: automake

# we need c++ compiler for f.e. cups-driverd binary

BuildRequires: gcc-c++

# Make sure we get postscriptdriver tags.

BuildRequires: python-cups

%if %lspp

BuildRequires: libselinux-devel

BuildRequires: audit-libs-devel

%endif

Requires: dbus

# Requires working PrivateTmp (bug #807672)

Requires(pre): systemd

Requires(post): systemd

Requires(post): systemd-sysv

Requires(post): grep, sed

Requires(preun): systemd

Requires(postun): systemd

# We ship udev rules which use setfacl.

Requires: systemd

Requires: acl

# Make sure we have some filters for converting to raster format.

Requires: ghostscript-cups

%package client

Summary: CUPS printing system - client programs

Group: System Environment/Daemons

License: GPLv2

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

%if %use_alternatives

Provides: /usr/bin/lpq /usr/bin/lpr /usr/bin/lp /usr/bin/cancel /usr/bin/lprm /usr/bin/lpstat

Requires: /usr/sbin/alternatives

%endif

Provides: lpr

%package devel

Summary: CUPS printing system - development environment

Group: Development/Libraries

License: LGPLv2

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

Requires: openssl-devel

Requires: krb5-devel

Requires: zlib-devel

Provides: cupsddk-devel

%package libs

Summary: CUPS printing system - libraries

Group: System Environment/Libraries

License: LGPLv2 and zlib

%package filesystem

Summary: CUPS printing system - directory layout

Group: System Environment/Base

BuildArch: noarch

Requires: cups-filters

%package lpd

Summary: CUPS printing system - lpd emulation

Group: System Environment/Daemons

Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

Provides: lpd

%package ipptool

Summary: CUPS printing system - tool for performing IPP requests

Group: System Environment/Daemons

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

%description

CUPS printing system provides a portable printing layer for

UNIX® operating systems. It has been developed by Apple Inc.

to promote a standard printing solution for all UNIX vendors and users.

CUPS provides the System V and Berkeley command-line interfaces.

%description client

CUPS printing system provides a portable printing layer for

UNIX® operating systems. This package contains command-line client

programs.

%description devel

CUPS printing system provides a portable printing layer for

UNIX® operating systems. This is the development package for creating

additional printer drivers, and other CUPS services.

%description libs

CUPS printing system provides a portable printing layer for

UNIX® operating systems. It has been developed by Apple Inc.

to promote a standard printing solution for all UNIX vendors and users.

CUPS provides the System V and Berkeley command-line interfaces.

The cups-libs package provides libraries used by applications to use CUPS

natively, without needing the lp/lpr commands.

%description filesystem

CUPS printing system provides a portable printing layer for

UNIX® operating systems. This package provides some directories which are

required by other packages that add CUPS drivers (i.e. filters, backends etc.).

%description lpd

CUPS printing system provides a portable printing layer for

UNIX® operating systems. This is the package that provides standard

lpd emulation.

%description ipptool

Sends IPP requests to the specified URI and tests and/or displays the results.

%prep

%setup -q

# Don't gzip man pages in the Makefile, let rpmbuild do it.

%patch1 -p1 -b .no-gzip-man

# Use the system pam configuration.

%patch2 -p1 -b .system-auth

# Prevent multilib conflict in cups-config script.

%patch3 -p1 -b .multilib

# Ensure attributes are valid UTF-8 in dbus notifier (bug #863387).

%patch4 -p1 -b .dbus-utf8

# Ignore rpm save/new files in the banners directory.

%patch5 -p1 -b .banners

# Use compatibility fallback path for ServerBin.

%patch6 -p1 -b .serverbin-compat

# Don't export SSLLIBS to cups-config.

%patch7 -p1 -b .no-export-ssllibs

# Allow file-based usb device URIs.

%patch8 -p1 -b .direct-usb

# Add --help option to lpr.

%patch9 -p1 -b .lpr-help

# Fix compilation of peer credentials support.

%patch10 -p1 -b .peercred

# Maintain a cupsd.pid file.

%patch11 -p1 -b .pid

# Fix implementation of com.redhat.PrinterSpooler D-Bus object.

%patch12 -p1 -b .eggcups

# Increase driverd timeout to 70s to accommodate foomatic (bug #744715).

%patch13 -p1 -b .driverd-timeout

# Only enforce maximum PPD line length when in strict mode.

%patch14 -p1 -b .strict-ppd-line-length

# Re-open the log if it has been logrotated under us.

%patch15 -p1 -b .logrotate

# Support for errno==ENOSPACE-based USB paper-out reporting.

%patch16 -p1 -b .usb-paperout

# Re-initialise the resolver on failure in httpAddrGetList() (bug #567353).

%patch17 -p1 -b .res_init

# Log extra debugging information if no filters are available.

%patch18 -p1 -b .filter-debug

# Allow the usb backend to understand old-style URI formats.

%patch19 -p1 -b .uri-compat

# Fix temporary filename creation.

%patch20 -p1 -b .str3382

# Use mode 0755 for binaries and libraries where appropriate.

%patch21 -p1 -b .0755

# Add an SNMP query for HP's device ID OID (STR #3552).

%patch22 -p1 -b .hp-deviceid-oid

# Mark DNS-SD Device IDs that have been guessed at with "FZY:1;".

%patch23 -p1 -b .dnssd-deviceid

# Add an SNMP query for Ricoh's device ID OID (STR #3552).

%patch24 -p1 -b .ricoh-deviceid-oid

# Add support for systemd socket activation (patch from Lennart

# Poettering).

%patch25 -p1 -b .systemd-socket

# Talk about systemd in cups-lpd manpage (part of bug #884641).

%patch26 -p1 -b .lpd-manpage

# Use IP address when resolving DNSSD URIs (bug #948288).

%patch27 -p1 -b .avahi-address

# Added usblp quirk for Canon PIXMA MP540 (bug #967873).

%patch28 -p1 -b .usblp-quirks

# Return from cupsEnumDests() once all records have been returned.

%patch29 -p1 -b .enum-all

# Prevent stringpool damage leading to memory leaks (bug #974048).

%patch30 -p1 -b .stringpool-setprinterattr

# Added IEEE 1284 Device ID for a Dymo device (bug #747866).

%patch31 -p1 -b .dymo-deviceid

# Default to IPP/1.1 for now (bug #977813).

%patch32 -p1 -b .use-ipp1.1

# Don't link against libgcrypt needlessly.

%patch33 -p1 -b .no-gcry

# Don't use D-Bus from two threads (bug #979748).

%patch34 -p1 -b .avahi-no-threaded

# Avoid sign-extending CRCs for gz decompression (bug #983486).

%patch35 -p1 -b .gz-crc

# Fixes for jobs with multiple files and multiple formats.

%patch36 -p1 -b .ipp-multifile

# Full relro (bug #996740).

%patch37 -p1 -b .full-relro

# Increase web interface get-devices timeout to 10s (bug #996664).

%patch38 -p1 -b .web-devices-timeout

# Add SyncOnClose option (bug #984883).

%patch39 -p1 -b .synconclose

# Fix cupsGetPPD3() so it doesn't give the caller an unreadable file

# (part of fix for CVE-2014-5031, STR #4500).

%patch40 -p1 -b .str4500

# Avoid stale lockfile in dbus notifier (bug #1030666).

%patch41 -p1 -b .dbus-notifier

# Prevent USB timeouts causing incorrect print output (bug #1036057).

%patch42 -p1 -b .usb-timeout

# Return jobs in rank order when handling IPP-Get-Jobs (bug #1046841).

%patch43 -p1 -b .str4326

# Apply upstream patch to improve cupsUser() (bug #1046845).

%patch44 -p1 -b .str4327

# Apply upstream patch to fix cross-site scripting flaw (CVE-2014-2856,

# bug #1087122).

%patch45 -p1 -b .CVE-2014-2856

# Fix for cupsEnumDest() 'removed' callbacks (bug #1072954, STR #4380).

%patch46 -p1 -b .str4380

# Use colord interface correctly (bug #1087323).

%patch47 -p1 -b .colord-interface

# Apply upstream patch to avoid 10 second timeouts in cupsd caused by

# reading when no data ready (bug #1110259).

%patch48 -p1 -b .nodatadelay

# Avoid race condition in cupsdReadClient() (bug #1113045).

%patch49 -p1 -b .str4440

# Describe ErrorPolicy in the cupsd.conf man page (bug #1120591).

%patch50 -p1 -b .error-policy-manpage

# Apply upstream patch to fix privilege escalation due to insufficient

# checking (CVE-2014-3537, bug #1115576).

%patch51 -p1 -b .CVE-2014-3537

# Apply upstream patch to fix CVE-2014-5029 (bug #1122600),

# CVE-2014-5030 (bug #1128764), CVE-2014-5031 (bug #1128767).

%patch52 -p1 -b .CVE-2014-5029-5030-5031

# Fix conf/log file reading for authenticated users (STR #4461).

%patch53 -p1 -b .str4461

# Fix icon display in web interface during server restart (STR #4475).

%patch54 -p1 -b .str4475

# Support for failover without load-balancing (bug #1115219).

%patch55 -p1 -b .failover-backend

# Improper Update of Reference Count -- CVE-2015-1158

# Cross-Site Scripting -- CVE-2015-1159

# (bug #1229985)

%patch56 -p1 -b .str4609

# cupsRasterReadPixels buffer overflow -- CVE-2014-9679 (bug #1229985).

%patch57 -p1 -b .str4551

# Don't use SSLv3 by default (bug #1161172, STR #4476).

%patch58 -p1 -b .str4476

# Validate ErrorPolicy in configuration (bug #1196218, STR #4591).

%patch59 -p1 -b .str4591

# Fix slow resume of jobs after restart (bug #1233006, STR #4646).

%patch60 -p1 -b .str4646

# Don't start jobs while cancelling others (bug #1233002, STR #4648).

%patch61 -p1 -b .str4648

# Start cups.service in multi-user target by default (bug #1236184).

%patch62 -p1 -b .start-service

# Email notifications ("lp -m") for printer classes don't work (bug #1257751)

%patch63 -p1 -b .enotif

# Gnome-settings-daemon leaks file descriptors (bug #1297035)

%patch64 -p1 -b .fdleak

# Printer State Message not cleared upon successful print job completion (bug #1353096)

%patch65 -p1 -b .state-message

# CUPS does not recognize changes to /etc/resolv.conf until CUPS restart (bug #1325692)

%patch66 -p1 -b .resolv_reload

# cups-lpd program did not catch all legacy usage of ISO-8859-1 (bug #1386751)

%patch67 -p1 -b .legacy-iso88591

# CUPS may fail to start if NIS groups are used (bug #1441860)

%patch68 -p1 -b .ypbind

# The -h option is overridden by _cupsSetDefaults settings when the IPP port is not given (bug #1430882)

%patch69 -p1 -b .overriden-h

%if %lspp

# LSPP support.

%patch100 -p1 -b .lspp

%endif

# Failover backend won't fail-over if the printer is disconnected (bug #1469816)

%patch70 -p1 -b .net-backends-etimedout-enotconn

# Remove weak SSL/TLS ciphers from CUPS (bug #1466497)

%patch71 -p1 -b .tlsv12

# CUPS print jobs show incorrect number under the "pages" column (bug #1434153)

%patch72 -p1 -b .page-count

# 1622430 - Jobs with multiple files don't complete when backend fails

%patch73 -p1 -b .multifile-stuck

# 1570480 - CUPS cannot authorize users obtained from external identity servers by sssd

%patch74 -p1 -b .getgrouplist

# 1700637 - Stop advertising the HTTP methods that are supported

%patch75 -p1 -b .dont-send-http-options-field

# 1608764 - CVE-2018-4180 cups

# 1607291 - CVE-2018-4181 cups

# backported patch for multiple security issues

# prevent passing malicious changes of for example printing backend

# through configuration

%patch76 -p1 -b .harden-env-var-parsing

# 1651575 - CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection

%patch77 -p1 -b .session-cookie-fix

# 1687571 - cupsd doesn't clean up temp files if client connection is terminated abnormally

%patch78 -p1 -b .unlink-tmp-file

sed -i -e '1iMaxLogSize 0' conf/cupsd.conf.in

# Let's look at the compilation command lines.

perl -pi -e "s,^.SILENT:,," Makedefs.in

f=CREDITS.txt

mv "$f" "$f"~

iconv -f MACINTOSH -t UTF-8 "$f"~ > "$f"

rm -f "$f"~

aclocal -I config-scripts

autoconf -f -I config-scripts

%build

export CFLAGS="$RPM_OPT_FLAGS -fstack-protector-all -DLDAP_DEPRECATED=1"

export CC=gcc

export CXX=g++

# --enable-debug to avoid stripping binaries

%configure --with-docdir=%{_datadir}/%{name}/www --enable-debug \

%if %lspp

	--enable-lspp \

%endif

	--with-cupsd-file-perm=0755 \

	--with-log-file-perm=0600 \

	--enable-relro \

	--with-dbusdir=%{_sysconfdir}/dbus-1 \

	--with-php=/usr/bin/php-cgi \

	--enable-avahi \

	--enable-threads --enable-openssl \

	--enable-webif \

	--with-xinetd=no \

	localedir=%{_datadir}/locale

# If we got this far, all prerequisite libraries must be here.

make %{?_smp_mflags}

%install

make BUILDROOT=$RPM_BUILD_ROOT install 

rm -rf	$RPM_BUILD_ROOT%{_initddir} \

	$RPM_BUILD_ROOT%{_sysconfdir}/init.d \

	$RPM_BUILD_ROOT%{_sysconfdir}/rc?.d

mkdir -p $RPM_BUILD_ROOT%{_unitdir}

find $RPM_BUILD_ROOT%{_datadir}/cups/model -name "*.ppd" |xargs gzip -n9f

%if %use_alternatives

pushd $RPM_BUILD_ROOT%{_bindir}

for i in cancel lp lpq lpr lprm lpstat; do

	mv $i $i.cups

done

cd $RPM_BUILD_ROOT%{_sbindir}

mv lpc lpc.cups

cd $RPM_BUILD_ROOT%{_mandir}/man1

for i in cancel lp lpq lpr lprm lpstat; do

	mv $i.1 $i-cups.1

done

cd $RPM_BUILD_ROOT%{_mandir}/man8

mv lpc.8 lpc-cups.8

popd

%endif

mkdir -p $RPM_BUILD_ROOT%{_datadir}/pixmaps $RPM_BUILD_ROOT%{_sysconfdir}/X11/sysconfig $RPM_BUILD_ROOT%{_sysconfdir}/X11/applnk/System $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d

install -p -m 644 %{SOURCE2} $RPM_BUILD_ROOT%{_datadir}/pixmaps

install -p -m 644 %{SOURCE3} %{buildroot}%{_unitdir}

install -p -m 644 %{SOURCE4} %{buildroot}%{_unitdir}

install -p -m 644 %{SOURCE6} $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/cups

install -p -m 755 %{SOURCE7} $RPM_BUILD_ROOT%{cups_serverbin}/backend/ncp

# Ship an rpm macro for where to put driver executables.

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/rpm/

install -m 0644 %{SOURCE8} $RPM_BUILD_ROOT%{_sysconfdir}/rpm/

# Ship a printers.conf file, and a client.conf file.  That way, they get

# their SELinux file contexts set correctly.

touch $RPM_BUILD_ROOT%{_sysconfdir}/cups/printers.conf

touch $RPM_BUILD_ROOT%{_sysconfdir}/cups/classes.conf

touch $RPM_BUILD_ROOT%{_sysconfdir}/cups/client.conf

touch $RPM_BUILD_ROOT%{_sysconfdir}/cups/subscriptions.conf

touch $RPM_BUILD_ROOT%{_sysconfdir}/cups/lpoptions

# LSB 3.2 printer driver directory

mkdir -p $RPM_BUILD_ROOT%{_datadir}/ppd

# Remove unshipped files.

rm -rf $RPM_BUILD_ROOT%{_mandir}/cat? $RPM_BUILD_ROOT%{_mandir}/*/cat?

rm -f $RPM_BUILD_ROOT%{_datadir}/applications/cups.desktop

rm -rf $RPM_BUILD_ROOT%{_datadir}/icons

# there are pdf-banners shipped with cups-filters (#919489)

rm -f $RPM_BUILD_ROOT%{_datadir}/cups/banners/{classified,confidential,secret,standard,topsecret,unclassified}

rm -f $RPM_BUILD_ROOT%{_datadir}/cups/data/testprint

# install /usr/lib/tmpfiles.d/cups.conf (bug #656566, bug #893834)

mkdir -p ${RPM_BUILD_ROOT}%{_tmpfilesdir}

cat > ${RPM_BUILD_ROOT}%{_tmpfilesdir}/cups.conf <

# See tmpfiles.d(5) for details

d /run/cups 0755 root lp -

d /run/cups/certs 0511 lp sys -

d /var/spool/cups/tmp - - - 30d

EOF

# /usr/lib/tmpfiles.d/cups-lp.conf (bug #812641)

cat > ${RPM_BUILD_ROOT}%{_tmpfilesdir}/cups-lp.conf <

# Legacy parallel port character device nodes, to trigger the

# auto-loading of the kernel module on access.

#

# See tmpfiles.d(5) for details

c /dev/lp0 0660 root lp - 6:0

c /dev/lp1 0660 root lp - 6:1

c /dev/lp2 0660 root lp - 6:2

c /dev/lp3 0660 root lp - 6:3

EOF

find $RPM_BUILD_ROOT -type f -o -type l | sed '

s:.*\('%{_datadir}'/\)\([^/_]\+\)\(.*\.po$\):%lang(\2) \1\2\3:

/^%lang(C)/d

/^\([^%].*\)/d

' > %{name}.lang

%post

%systemd_post %{name}.path %{name}.socket %{name}.service

# Remove old-style certs directory; new-style is /var/run

# (see bug #194581 for why this is necessary).

rm -rf %{_sysconfdir}/cups/certs

rm -f %{_localstatedir}/cache/cups/*.ipp %{_localstatedir}/cache/cups/*.cache

# Deal with config migration due to CVE-2012-5519 (STR #4223)

IN=%{_sysconfdir}/cups/cupsd.conf

OUT=%{_sysconfdir}/cups/cups-files.conf

copiedany=no

for keyword in AccessLog CacheDir ConfigFilePerm	\

    DataDir DocumentRoot ErrorLog FatalErrors		\

    FileDevice FontPath Group LogFilePerm		\

    LPDConfigFile PageLog Printcap PrintcapFormat	\

    RemoteRoot RequestRoot ServerBin ServerCertificate	\

    ServerKey ServerRoot SMBConfigFile StateDir		\

    SystemGroup SystemGroupAuthKey TempDir User; do

    if ! [ -f "$IN" ] || ! /bin/grep -wiq ^$keyword "$IN"; then continue; fi

    copy=yes

    if /bin/grep -wiq ^$keyword "$OUT"; then

	if [ "`/bin/grep -wi ^$keyword "$IN"`" ==	\

	     "`/bin/grep -wi ^$keyword "$OUT"`" ]; then

	    copy=no

	else

	    /bin/sed -i -e "s,^$keyword\b,#$keyword,i" "$OUT" || :

	fi

    fi

    if [ "$copy" == "yes" ]; then

	if [ "$copiedany" == "no" ]; then

	    (cat >> "$OUT" <

# Settings automatically moved from cupsd.conf by RPM package:

EOF

	    ) || :

	fi

	(/bin/grep -wi ^$keyword "$IN" >> "$OUT") || :

	copiedany=yes

    fi

    /bin/sed -i -e "s,^$keyword\b,#$keyword,i" "$IN" || :

done

# Comment out mistaken move of AccessLogLevel to

# cups-files.conf (bug #1235035).

for keyword in AccessLogLevel PageLogFormat; do

    /bin/sed -i -e "s,^$keyword\b,#$keyword,i" "$OUT" || :

done

exit 0

%post client

%if %use_alternatives

/usr/sbin/alternatives --install %{_bindir}/lpr print %{_bindir}/lpr.cups 40 \

	 --slave %{_bindir}/lp print-lp %{_bindir}/lp.cups \

	 --slave %{_bindir}/lpq print-lpq %{_bindir}/lpq.cups \

	 --slave %{_bindir}/lprm print-lprm %{_bindir}/lprm.cups \

	 --slave %{_bindir}/lpstat print-lpstat %{_bindir}/lpstat.cups \

	 --slave %{_bindir}/cancel print-cancel %{_bindir}/cancel.cups \

	 --slave %{_sbindir}/lpc print-lpc %{_sbindir}/lpc.cups \

	 --slave %{_mandir}/man1/cancel.1.gz print-cancelman %{_mandir}/man1/cancel-cups.1.gz \

	 --slave %{_mandir}/man1/lp.1.gz print-lpman %{_mandir}/man1/lp-cups.1.gz \

	 --slave %{_mandir}/man8/lpc.8.gz print-lpcman %{_mandir}/man8/lpc-cups.8.gz \

	 --slave %{_mandir}/man1/lpq.1.gz print-lpqman %{_mandir}/man1/lpq-cups.1.gz \

	 --slave %{_mandir}/man1/lpr.1.gz print-lprman %{_mandir}/man1/lpr-cups.1.gz \

	 --slave %{_mandir}/man1/lprm.1.gz print-lprmman %{_mandir}/man1/lprm-cups.1.gz \

	 --slave %{_mandir}/man1/lpstat.1.gz print-lpstatman %{_mandir}/man1/lpstat-cups.1.gz

%endif

exit 0

%post lpd

%systemd_post cups-lpd.socket

exit 0

%post libs -p /sbin/ldconfig

%postun libs -p /sbin/ldconfig

%preun

%systemd_preun %{name}.path %{name}.socket %{name}.service

exit 0

%preun client

%if %use_alternatives

if [ $1 -eq 0 ] ; then

	/usr/sbin/alternatives --remove print %{_bindir}/lpr.cups

fi

%endif

exit 0

%preun lpd

%systemd_preun cups-lpd.socket

exit 0

%postun

%systemd_postun_with_restart %{name}.service

exit 0

%postun lpd

%systemd_postun_with_restart cups-lpd.socket

exit 0

%triggerun -- %{name} < 1:1.5-0.9

# Save the current service runlevel info

# User must manually run systemd-sysv-convert --apply cups

# to migrate them to systemd targets

%{_bindir}/systemd-sysv-convert --save %{name} >/dev/null 2>&1 || :

# This package is allowed to autostart:

/bin/systemctl --no-reload enable %{name}.{service,socket,path} >/dev/null 2>&1 || :

# Run these because the SysV package being removed won't do them

/sbin/chkconfig --del cups >/dev/null 2>&1 || :

/bin/systemctl try-restart %{name}.service >/dev/null 2>&1 || :

%triggerin -- samba-client

ln -sf %{_libexecdir}/samba/cups_backend_smb %{cups_serverbin}/backend/smb || :

exit 0

%triggerun -- samba-client

[ $2 = 0 ] || exit 0

rm -f %{cups_serverbin}/backend/smb

%files -f %{name}.lang

%doc README.txt CREDITS.txt CHANGES.txt

%dir %attr(0755,root,lp) %{_sysconfdir}/cups

%dir %attr(0755,root,lp) %{_localstatedir}/run/cups

%dir %attr(0511,lp,sys) %{_localstatedir}/run/cups/certs

%{_tmpfilesdir}/cups.conf

%{_tmpfilesdir}/cups-lp.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0640,root,lp) %{_sysconfdir}/cups/cupsd.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0640,root,lp) %{_sysconfdir}/cups/cups-files.conf

%attr(0640,root,lp) %{_sysconfdir}/cups/cupsd.conf.default

%verify(not md5 size mtime) %config(noreplace) %attr(0644,root,lp) %{_sysconfdir}/cups/client.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0600,root,lp) %{_sysconfdir}/cups/classes.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0600,root,lp) %{_sysconfdir}/cups/printers.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0644,root,lp) %{_sysconfdir}/cups/snmp.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0640,root,lp) %{_sysconfdir}/cups/subscriptions.conf

%{_sysconfdir}/cups/interfaces

%verify(not md5 size mtime) %config(noreplace) %attr(0644,root,lp) %{_sysconfdir}/cups/lpoptions

%dir %attr(0755,root,lp) %{_sysconfdir}/cups/ppd

%dir %attr(0700,root,lp) %{_sysconfdir}/cups/ssl

%config(noreplace) %{_sysconfdir}/pam.d/cups

%config(noreplace) %{_sysconfdir}/logrotate.d/cups

%dir %{_datadir}/%{name}/www

%dir %{_datadir}/%{name}/www/ca

%dir %{_datadir}/%{name}/www/cs

%dir %{_datadir}/%{name}/www/es

%dir %{_datadir}/%{name}/www/fr

%dir %{_datadir}/%{name}/www/ja

%dir %{_datadir}/%{name}/www/ru

%{_datadir}/%{name}/www/images

%{_datadir}/%{name}/www/*.css

%doc %{_datadir}/%{name}/www/index.html

%doc %{_datadir}/%{name}/www/help

%doc %{_datadir}/%{name}/www/robots.txt

%doc %{_datadir}/%{name}/www/ca/index.html

%doc %{_datadir}/%{name}/www/cs/index.html

%doc %{_datadir}/%{name}/www/es/index.html

%doc %{_datadir}/%{name}/www/fr/index.html

%doc %{_datadir}/%{name}/www/ja/index.html

%doc %{_datadir}/%{name}/www/ru/index.html

%{_unitdir}/%{name}.service

%{_unitdir}/%{name}.socket

%{_unitdir}/%{name}.path

%{_bindir}/cupstestppd

%{_bindir}/cupstestdsc

%{_bindir}/ppd*

%{cups_serverbin}/backend/*

%{cups_serverbin}/cgi-bin

%dir %{cups_serverbin}/daemon

%{cups_serverbin}/daemon/cups-deviced

%{cups_serverbin}/daemon/cups-driverd

%{cups_serverbin}/daemon/cups-exec

%{cups_serverbin}/notifier

%{cups_serverbin}/filter/*

%{cups_serverbin}/monitor

%{_mandir}/man[1578]/*

# client subpackage

%exclude %{_mandir}/man1/lp*.1.gz

%exclude %{_mandir}/man1/cancel-cups.1.gz

%exclude %{_mandir}/man8/lpc-cups.8.gz

# devel subpackage

%exclude %{_mandir}/man1/cups-config.1.gz

# ipptool subpackage