%global use_alternatives 1

%global lspp 1 

# {_exec_prefix}/lib/cups is correct, even on x86_64.

# It is not used for shared objects but for executables.

# It's more of a libexec-style ({_libexecdir}) usage,

# but we use lib for compatibility with 3rd party drivers (at upstream request).

%global cups_serverbin %{_exec_prefix}/lib/cups

#%%global prever rc1

#%%global VERSION %%{version}%%{prever}

%global VERSION %{version}

Summary: CUPS printing system

Name: cups

Epoch: 1

Version: 2.2.6

Release: 51%{?dist}

License: GPLv2+ and LGPLv2 with exceptions and AML

Url: http://www.cups.org/

Source0: https://github.com/apple/cups/releases/download/v%{VERSION}/cups-%{VERSION}-source.tar.gz

# Pixmap for desktop file

Source2: cupsprinter.png

# Logrotate configuration

Source6: cups.logrotate

# Backend for NCP protocol

Source7: ncp.backend

Source8: macros.cups

Patch1: cups-no-gzip-man.patch

Patch2: cups-system-auth.patch

Patch3: cups-multilib.patch

Patch5: cups-banners.patch

Patch6: cups-serverbin-compat.patch

Patch7: cups-no-export-ssllibs.patch

Patch8: cups-direct-usb.patch

Patch9: cups-lpr-help.patch

Patch10: cups-peercred.patch

Patch11: cups-pid.patch

Patch12: cups-eggcups.patch

Patch13: cups-driverd-timeout.patch

Patch14: cups-strict-ppd-line-length.patch

Patch15: cups-logrotate.patch

Patch16: cups-usb-paperout.patch

Patch17: cups-res_init.patch

Patch18: cups-filter-debug.patch

Patch19: cups-uri-compat.patch

Patch20: cups-str3382.patch

#Patch21: cups-0755.patch

Patch22: cups-hp-deviceid-oid.patch

Patch23: cups-dnssd-deviceid.patch

Patch24: cups-ricoh-deviceid-oid.patch

Patch25: cups-systemd-socket.patch

Patch27: cups-avahi-address.patch

Patch29: cups-dymo-deviceid.patch

Patch30: cups-freebind.patch

#Patch31: cups-no-gcry.patch

Patch33: cups-use-ipp1.1.patch

Patch34: cups-avahi-no-threaded.patch

Patch35: cups-ipp-multifile.patch

Patch36: cups-web-devices-timeout.patch

Patch37: cups-synconclose.patch

Patch38: cups-ypbind.patch

Patch39: cups-substitute-bad-attrs.patch

# 1607295 - CVE-2018-4180 CVE-2018-4181 CVE-2018-4182 CVE-2018-4183 cups: various flaws [rhel-8.0]

Patch40: 0001-Fix-local-privilege-escalation-to-root-and-sandbox-b.patch

# 1613173 - Remove weak SSL/TLS ciphers from CUPS

Patch41: 0001-Add-support-for-MinTLS-and-MaxTLS-options-Issue-5119.patch

# 1602469 - fixed covscan issues, backported from upstream

Patch42: 0001-Fix-memory-leaks-found-by-Coverity-Issue-5375.patch

# 1625899 - cups 2.2.6 lpr command fails against old cups 1.3.9 server

Patch43: 0001-Printing-to-old-CUPS-servers-has-been-fixed-Issue-52.patch

# 1625913 - ssl options aren't initialized when no SSLOptions directive is set in /etc/cups/client.conf

Patch44: 0001-Fix-default-TLS-versions.patch

# 1622431 - Jobs with multiple files don't complete when backend fails

Patch45: 0001-Fix-stuck-multi-file-jobs-Issue-5359-Issue-5413.patch

# CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection [rhel-8]

Patch46: 0001-CVE-2018-4700-Linux-session-cookies-used-a-predictab.patch

# 1659486 - cupsd crash on startup in ippCopyAttribute

Patch47: 0001-The-scheduler-could-crash-while-adding-an-IPP-Everyw.patch

# 1677577 - Remove 'View X log' buttons from web ui

Patch48: 0001-Remove-web-log-buttons.patch

# 1650233 - cups uses md5 for hashing credentials sent through tls connection

Patch49: cups-fips-compliance.patch

# 1700663 - Stop advertising the HTTP methods that are supported

Patch50: cups-do-not-advertise-http-methods.patch

# 1774462, 1774463 - CVE-2019-8696, CVE-2019-8675 - buffer overflow in SNMP and IPP,

# memory disclosure and DoS in scheduler

Patch51: 0001-Multiple-security-disclosure-issues.patch

# 1775668 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created

Patch52: cups-memory-consumption.patch

# 1784884 - cups.service doesn't execute automatically on request

Patch53: cups-autostart-when-enabled.patch

# 1825253 - CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c

Patch54: cups-ppdopen-heap-overflow.patch

# 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)

Patch55: cups-etimedout.patch

# 1689207 - Add failover backend

Patch56: cups-failover-backend.patch

# 1833516 - DirtyCleanInterval ignored if there are open client connections

Patch57: cups-dirtyclean.patch

# 1775590 - rastertoepson filter crashes with paper size A6

Patch58: cups-rastertoepson-crash.patch

# 1941437 - cupsd doesn't log job ids when logging into journal

Patch59: cups-logs.patch

# 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP

Patch60: cups-validate-1st.patch

# 1938384 - CUPS doesn't start if sssd starts after cupsd

Patch61: cups-sssd.patch

# 1955964 - PreserveJobHistory doesn't work with seconds

Patch62: cups-fix-preservejob-times.patch

# 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]

Patch63: cups-cve202010001.patch

# 2006987 - Unauthenticated users can't move print jobs in Web UI

Patch64: 0001-cgi-bin-ipp-var.c-Use-guest-user-for-Move-Job-when-n.patch

# 2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited

Patch65: 0001-Fix-handling-of-MaxJobTime-0-Issue-5438.patch

# 1726383 - "lpadmin -p <queue> -o cupsSNMPSupplies:false" doesn't work

Patch66: 0001-Fix-lpadmin-with-cupsIPPSupplies-and-cupsSNMPSupplie.patch

# 1982891 - Printing of banner before PCL file only prints banner

Patch67: 0001-scheduler-job.c-use-gziptoany-for-raw-files-not-just.patch

# 2006591 - Trying to restart and hold a job doesn't work

Patch68: cups-restart-job-hold-until.patch

# 1811716 - lpr to non-existent printer reports incorrect error

Patch69: 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch

# 2015182 - RFE: Implement IdleExitTimeout configuration during build

Patch70: 0001-Add-with-idle-exit-timeout-configure-option.patch

# 2013865 - RFE: Implement TimeoutStartSec configuration during build

Patch71: 0001-Add-with-systemd-timeoutstartsec-configure-option.patch

# 2032965 - [RFE] RHEL8 - CUPS Web UI supports adding IPP Everywhere

Patch72: cups-ippeve-web-support.patch

# 2071417 - 30-second delays printing to Windows 2016 server via HTTPS

Patch73: 0001-cups-tls-gnutls.c-Use-always-GNUTLS_SHUT_WR.patch

# 2074684 - lp to a remote server takes a long time

Patch74: 0001-Use-cupsGetNamedDest-for-legacy-printing-APIs-Issue-.patch

# 2074736 - CUPS is too chatty about "Removing document files." in debug mode

Patch75: cups-cupsd-too-chatty.patch

# CVE-2022-26691 cups: authorization bypass when using "local" authorization

Patch76: 0001-scheduler-cert.c-Fix-string-comparison-fixes-CVE-202.patch

# 2084257 - ErrorPolicy documentation is incorrect

Patch77: cups-retry-current-job-man.patch

# 1910415 - manpage update to acknowledge order dependency of -h option

Patch78: 0001-Update-man-pages-for-h-option-Issue-357.patch

# 2130391 - Kerberized IPP Printing Fails

Patch79: cups-kerberos.patch

Patch1000: cups-lspp.patch

Requires: %{name}-filesystem = %{epoch}:%{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

Requires: %{name}-client%{?_isa} = %{epoch}:%{version}-%{release}

Provides: cupsddk cupsddk-drivers

BuildRequires: pam-devel pkgconf-pkg-config

BuildRequires: pkgconfig(gnutls)

BuildRequires: libacl-devel

BuildRequires: openldap-devel

BuildRequires: pkgconfig(libusb-1.0)

BuildRequires: krb5-devel

BuildRequires: pkgconfig(avahi-client)

BuildRequires: systemd

BuildRequires: pkgconfig(libsystemd)

BuildRequires: pkgconfig(dbus-1)

BuildRequires: automake

# for decompressing functions when reading from a gzipped file

BuildRequires: zlib-devel

# gcc and gcc-c++ is no longer in buildroot by default

# gcc for most of files

BuildRequires: gcc

# gcc-c++ for ppdc and cups-driverd

Buildrequires: gcc-c++ 

# Make sure we get postscriptdriver tags.

BuildRequires: python3-cups

%if %{lspp}

BuildRequires: libselinux-devel

BuildRequires: audit-libs-devel

%endif

Requires: dbus

# Requires working PrivateTmp (bug #807672)

Requires(pre): systemd

Requires(post): systemd

Requires(post): grep, sed

Requires(preun): systemd

Requires(postun): systemd

# We ship udev rules which use setfacl.

Requires: systemd

Requires: acl

# Make sure we have some filters for converting to raster format.

Requires: cups-filters

%package client

Summary: CUPS printing system - client programs

License: GPLv2

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

%if %{use_alternatives}

Provides: /usr/bin/lpq /usr/bin/lpr /usr/bin/lp /usr/bin/cancel /usr/bin/lprm /usr/bin/lpstat

Requires: /usr/sbin/alternatives

%endif

Provides: lpr

%package devel

Summary: CUPS printing system - development environment

License: LGPLv2

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

Requires: gnutls-devel

Requires: krb5-devel

Requires: zlib-devel

Provides: cupsddk-devel

%package libs

Summary: CUPS printing system - libraries

License: LGPLv2 and zlib

%package filesystem

Summary: CUPS printing system - directory layout

BuildArch: noarch

%package lpd

Summary: CUPS printing system - lpd emulation

Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

Provides: lpd

%package ipptool

Summary: CUPS printing system - tool for performing IPP requests

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

%description

CUPS printing system provides a portable printing layer for

UNIX® operating systems. It has been developed by Apple Inc.

to promote a standard printing solution for all UNIX vendors and users.

CUPS provides the System V and Berkeley command-line interfaces.

%description client

CUPS printing system provides a portable printing layer for

UNIX® operating systems. This package contains command-line client

programs.

%description devel

CUPS printing system provides a portable printing layer for

UNIX® operating systems. This is the development package for creating

additional printer drivers, and other CUPS services.

%description libs

CUPS printing system provides a portable printing layer for

UNIX® operating systems. It has been developed by Apple Inc.

to promote a standard printing solution for all UNIX vendors and users.

CUPS provides the System V and Berkeley command-line interfaces.

The cups-libs package provides libraries used by applications to use CUPS

natively, without needing the lp/lpr commands.

%description filesystem

CUPS printing system provides a portable printing layer for

UNIX® operating systems. This package provides some directories which are

required by other packages that add CUPS drivers (i.e. filters, backends etc.).

%description lpd

CUPS printing system provides a portable printing layer for

UNIX® operating systems. This is the package that provides standard

lpd emulation.

%description ipptool

Sends IPP requests to the specified URI and tests and/or displays the results.

%prep

%setup -q -n cups-%{VERSION}

# Don't gzip man pages in the Makefile, let rpmbuild do it.

%patch1 -p1 -b .no-gzip-man

# Use the system pam configuration.

%patch2 -p1 -b .system-auth

# Prevent multilib conflict in cups-config script.

%patch3 -p1 -b .multilib

# Ignore rpm save/new files in the banners directory.

%patch5 -p1 -b .banners

# Use compatibility fallback path for ServerBin.

%patch6 -p1 -b .serverbin-compat

# Don't export SSLLIBS to cups-config.

%patch7 -p1 -b .no-export-ssllibs

# Allow file-based usb device URIs.

%patch8 -p1 -b .direct-usb

# Add --help option to lpr.

%patch9 -p1 -b .lpr-help

# Fix compilation of peer credentials support.

%patch10 -p1 -b .peercred

# Maintain a cupsd.pid file.

%patch11 -p1 -b .pid

# Fix implementation of com.redhat.PrinterSpooler D-Bus object.

%patch12 -p1 -b .eggcups

# Increase driverd timeout to 70s to accommodate foomatic (bug #744715).

%patch13 -p1 -b .driverd-timeout

# Only enforce maximum PPD line length when in strict mode.

%patch14 -p1 -b .strict-ppd-line-length

# Re-open the log if it has been logrotated under us.

%patch15 -p1 -b .logrotate

# Support for errno==ENOSPACE-based USB paper-out reporting.

%patch16 -p1 -b .usb-paperout

# Re-initialise the resolver on failure in httpAddrGetList() (bug #567353).

%patch17 -p1 -b .res_init

# Log extra debugging information if no filters are available.

%patch18 -p1 -b .filter-debug

# Allow the usb backend to understand old-style URI formats.

%patch19 -p1 -b .uri-compat

# Fix temporary filename creation.

%patch20 -p1 -b .str3382

# Use mode 0755 for binaries and libraries where appropriate.

#%%patch21 -p1 -b .0755

# Add an SNMP query for HP's device ID OID (STR #3552).

%patch22 -p1 -b .hp-deviceid-oid

# Mark DNS-SD Device IDs that have been guessed at with "FZY:1;".

%patch23 -p1 -b .dnssd-deviceid

# Add an SNMP query for Ricoh's device ID OID (STR #3552).

%patch24 -p1 -b .ricoh-deviceid-oid

# Make cups.service Type=notify (bug #1088918).

%patch25 -p1 -b .systemd-socket

# Use IP address when resolving DNSSD URIs (bug #948288).

%patch27 -p1 -b .avahi-address

# Added IEEE 1284 Device ID for a Dymo device (bug #747866).

%patch29 -p1 -b .dymo-deviceid

# Use IP_FREEBIND socket option when binding listening sockets (bug #970809).

%patch30 -p1 -b .freebind

# Don't link against libgcrypt needlessly.

#%%patch31 -p1 -b .no-gcry

# Default to IPP/1.1 for now (bug #977813).

%patch33 -p1 -b .use-ipp1.1

# Don't use D-Bus from two threads (bug #979748).

%patch34 -p1 -b .avahi-no-threaded

# Fixes for jobs with multiple files and multiple formats.

%patch35 -p1 -b .ipp-multifile

# Increase web interface get-devices timeout to 10s (bug #996664).

%patch36 -p1 -b .web-devices-timeout

# Set the default for SyncOnClose to Yes.

%patch37 -p1 -b .synconclose

# CUPS may fail to start if NIS groups are used (bug #1494558)

%patch38 -p1 -b .ypbind

%if %{lspp}

# LSPP support.

%patch1000 -p1 -b .lspp

%endif

# substitute default values for invalid job attributes (upstream #5186 and #5229)

%patch39 -p1 -b .substitute-bad-attrs

# 1607295 - CVE-2018-4180 CVE-2018-4181 CVE-2018-4182 CVE-2018-4183 cups: various flaws [rhel-8.0]

%patch40 -p1 -b .privilege-escalation

# 1613173 - Remove weak SSL/TLS ciphers from CUPS

%patch41 -p1 -b .remove-weak-ciphers

# 1602469 - fixed covscan issues, backported from upstream

%patch42 -p1 -b .covscan

# 1625899 - cups 2.2.6 lpr command fails against old cups 1.3.9 server

%patch43 -p1 -b .oldcupsservers

# 1625913 - ssl options aren't initialized when no SSLOptions directive is set in /etc/cups/client.conf

%patch44 -p1 -b .defaulttls

# 1622431 - Jobs with multiple files don't complete when backend fails

%patch45 -p1 -b .multifile-stuck

# CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection [rhel-8]

%patch46 -p1 -b .predictable-cookie

# 1659486 - cupsd crash on startup in ippCopyAttribute

%patch47 -p1 -b .ippeve-crash

# 1677577 - Remove 'View X log' buttons from web ui

%patch48 -p1 -b .rm-webui-buttons

# 1650233 - cups uses md5 for hashing credentials sent through tls connection

%patch49 -p1 -b .fips-compliance

# 1700663 - Stop advertising the HTTP methods that are supported

%patch50 -p1 -b .do-not-advertise-http-methods

# 1774462, 1774463 - CVE-2019-8696, CVE-2019-8675 - buffer overflow in SNMP and IPP,

# memory disclosure and DoS in scheduler

%patch51 -p1 -b .cve-in-scheduler

# 1775668 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created

%patch52 -p1 -b .memory-consumption

# 1784884 - cups.service doesn't execute automatically on request

%patch53 -p1 -b .autostart-when-enabled

# 1825253 - CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c

%patch54 -p1 -b .ppdopen-heap-overflow

# 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)

%patch55 -p1 -b .etimedout

# 1689207 - Add failover backend

%patch56 -p1 -b .failover

# 1833516 - DirtyCleanInterval ignored if there are open client connections

%patch57 -p1 -b .dirtyclean

# 1775590 - rastertoepson filter crashes with paper size A6

%patch58 -p1 -b .rastertoepson-crash

# 1941437 - cupsd doesn't log job ids when logging into journal

%patch59 -p1 -b .logs

# 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP

%patch60 -p1 -b .validate-1st

# 1938384 - CUPS doesn't start if sssd starts after cupsd

%patch61 -p1 -b .sssd

# 1955964 - PreserveJobHistory doesn't work with seconds

%patch62 -p1 -b .cups-fix-preservejob-times

# 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]

%patch63 -p1 -b .cve202010001

# 2006987 - Unauthenticated users can't move print jobs in Web UI

%patch64 -p1 -b .move-job

# 2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited

%patch65 -p1 -b .maxjobtime

# 1726383 - "lpadmin -p <queue> -o cupsSNMPSupplies:false" doesn't work

%patch66 -p1 -b .supplies

# 1982891 - Printing of banner before PCL file only prints banner

%patch67 -p1 -b .banner-rawfiles

# 2006591 - Trying to restart and hold a job doesn't work

%patch68 -p1 -b .restart-hold-job

# 1811716 - lpr to non-existent printer reports incorrect error

%patch69 -p1 -b .lplpr-better-error

# 2015182 - RFE: Implement IdleExitTimeout configuration during build

%patch70 -p1 -b .idleexittimeout

# 2013865 - RFE: Implement TimeoutStartSec configuration during build

%patch71 -p1 -b .timeoutstartsec

# 2032965 - [RFE] RHEL8 - CUPS Web UI supports adding IPP Everywhere

%patch72 -p1 -b .ippeve-web-support

# 2071417 - 30-second delays printing to Windows 2016 server via HTTPS

%patch73 -p1 -b .gnutlsbye

# 2074684 - lp to a remote server takes a long time

%patch74 -p1 -b .lp-long-time

# 2074736 - CUPS is too chatty about "Removing document files." in debug mode

%patch75 -p1 -b .cupsd-too-chatty

# CVE-2022-26691 cups: authorization bypass when using "local" authorization

%patch76 -p1 -b .cve26691

# 2084257 - ErrorPolicy documentation is incorrect

%patch77 -p1 -b .retry-current-job-man

# 1910415 - manpage update to acknowledge order dependency of -h option

%patch78 -p1 -b .manpage-update

# 2130391 - Kerberized IPP Printing Fails

%patch79 -p1 -b .kerberos

sed -i -e '1iMaxLogSize 0' conf/cupsd.conf.in

# Log to the system journal by default (bug #1078781, bug #1519331).

sed -i -e 's,^ErrorLog .*$,ErrorLog syslog,' conf/cups-files.conf.in

sed -i -e 's,^AccessLog .*$,AccessLog syslog,' conf/cups-files.conf.in

sed -i -e 's,^PageLog .*$,PageLog syslog,' conf/cups-files.conf.in

# Add comment text mentioning syslog is systemd journal (bug #1358589)

sed -i -e 's,\"syslog\",\"syslog\" \(syslog means systemd journal by default\),' conf/cups-files.conf.in

# Add group wheel to SystemGroups (bug #1405669)

sed -i -e 's,^SystemGroup .*$, SystemGroup sys root wheel,' conf/cups-files.conf.in

# Let's look at the compilation command lines.

perl -pi -e "s,^.SILENT:,," Makedefs.in

f=CREDITS.md

mv "$f" "$f"~

iconv -f MACINTOSH -t UTF-8 "$f"~ > "$f"

rm -f "$f"~

aclocal -I config-scripts

autoconf -I config-scripts

%build

# add Fedora specific flags to DSOFLAGS

export DSOFLAGS="$DSOFLAGS -L../cgi-bin -L../filter -L../ppdc -L../scheduler -Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -Wl,-z,relro,-z,now -fPIE -pie" 

export CFLAGS="$RPM_OPT_FLAGS -fstack-protector-all -DLDAP_DEPRECATED=1"

export CC=gcc

export CXX=g++

# --enable-debug to avoid stripping binaries

%configure --with-docdir=%{_datadir}/%{name}/www --enable-debug \

%if %{lspp}

	--enable-lspp \

%endif

  --with-exe-file-perm=0755 \

	--with-cupsd-file-perm=0755 \

	--with-log-file-perm=0600 \

	--enable-relro \

	--with-dbusdir=%{_sysconfdir}/dbus-1 \

	--with-php=/usr/bin/php-cgi \

	--enable-avahi \

	--enable-threads \

	--enable-gnutls \

	--enable-webif \

	--with-xinetd=no \

	--with-access-log-level=actions \

	--enable-page-logging \

%if 0%{?rhel}

  --without-idle-exit-timeout \

  --without-systemd-timeoutstartsec \

%endif

	localedir=%{_datadir}/locale

# If we got this far, all prerequisite libraries must be here.

make %{?_smp_mflags}

%install

make BUILDROOT=%{buildroot} install

rm -rf	%{buildroot}%{_initddir} \

	%{buildroot}%{_sysconfdir}/init.d \

	%{buildroot}%{_sysconfdir}/rc?.d

mkdir -p %{buildroot}%{_unitdir}

find %{buildroot}%{_datadir}/cups/model -name "*.ppd" |xargs gzip -n9f

%if %{use_alternatives}

pushd %{buildroot}%{_bindir}

for i in cancel lp lpq lpr lprm lpstat; do

	mv $i $i.cups

done

cd %{buildroot}%{_sbindir}

mv lpc lpc.cups

cd %{buildroot}%{_mandir}/man1

for i in cancel lp lpq lpr lprm lpstat; do

	mv $i.1 $i-cups.1

done

cd %{buildroot}%{_mandir}/man8

mv lpc.8 lpc-cups.8

popd

%endif

mv %{buildroot}%{_unitdir}/org.cups.cupsd.path %{buildroot}%{_unitdir}/cups.path

mv %{buildroot}%{_unitdir}/org.cups.cupsd.service %{buildroot}%{_unitdir}/cups.service

mv %{buildroot}%{_unitdir}/org.cups.cupsd.socket %{buildroot}%{_unitdir}/cups.socket

mv %{buildroot}%{_unitdir}/org.cups.cups-lpd.socket %{buildroot}%{_unitdir}/cups-lpd.socket

mv %{buildroot}%{_unitdir}/org.cups.cups-lpd@.service %{buildroot}%{_unitdir}/cups-lpd@.service

/bin/sed -i -e "s,org.cups.cupsd,cups,g" %{buildroot}%{_unitdir}/cups.service

mkdir -p %{buildroot}%{_datadir}/pixmaps %{buildroot}%{_sysconfdir}/X11/sysconfig %{buildroot}%{_sysconfdir}/X11/applnk/System %{buildroot}%{_sysconfdir}/logrotate.d

install -p -m 644 %{SOURCE2} %{buildroot}%{_datadir}/pixmaps

install -p -m 644 %{SOURCE6} %{buildroot}%{_sysconfdir}/logrotate.d/cups

install -p -m 755 %{SOURCE7} %{buildroot}%{cups_serverbin}/backend/ncp

# Ship an rpm macro for where to put driver executables.

mkdir -p %{buildroot}%{_rpmconfigdir}/macros.d

install -m 0644 %{SOURCE8} %{buildroot}%{_rpmconfigdir}/macros.d

# Ship a printers.conf file, and a client.conf file.  That way, they get

# their SELinux file contexts set correctly.

touch %{buildroot}%{_sysconfdir}/cups/printers.conf

touch %{buildroot}%{_sysconfdir}/cups/classes.conf

touch %{buildroot}%{_sysconfdir}/cups/client.conf

touch %{buildroot}%{_sysconfdir}/cups/subscriptions.conf

touch %{buildroot}%{_sysconfdir}/cups/lpoptions

# LSB 3.2 printer driver directory

mkdir -p %{buildroot}%{_datadir}/ppd

# Remove unshipped files.

rm -rf %{buildroot}%{_mandir}/cat? %{buildroot}%{_mandir}/*/cat?

rm -f %{buildroot}%{_datadir}/applications/cups.desktop

rm -rf %{buildroot}%{_datadir}/icons

# there are pdf-banners shipped with cups-filters (#919489)

rm -rf %{buildroot}%{_datadir}/cups/banners

rm -f %{buildroot}%{_datadir}/cups/data/testprint

# install /usr/lib/tmpfiles.d/cups.conf (bug #656566, bug #893834)

mkdir -p ${RPM_BUILD_ROOT}%{_tmpfilesdir}

cat > ${RPM_BUILD_ROOT}%{_tmpfilesdir}/cups.conf <

# See tmpfiles.d(5) for details

d /run/cups 0755 root lp -

d /run/cups/certs 0511 lp sys -

d /var/spool/cups/tmp - - - 30d

EOF

# /usr/lib/tmpfiles.d/cups-lp.conf (bug #812641)

cat > ${RPM_BUILD_ROOT}%{_tmpfilesdir}/cups-lp.conf <

# Legacy parallel port character device nodes, to trigger the

# auto-loading of the kernel module on access.

#

# See tmpfiles.d(5) for details

c /dev/lp0 0660 root lp - 6:0

c /dev/lp1 0660 root lp - 6:1

c /dev/lp2 0660 root lp - 6:2

c /dev/lp3 0660 root lp - 6:3

EOF

find %{buildroot} -type f -o -type l | sed '

s:.*\('%{_datadir}'/\)\([^/_]\+\)\(.*\.po$\):%lang(\2) \1\2\3:

/^%lang(C)/d

/^\([^%].*\)/d

' > %{name}.lang

%post

%systemd_post %{name}.path %{name}.socket %{name}.service

# Remove old-style certs directory; new-style is /var/run

# (see bug #194581 for why this is necessary).

rm -rf %{_sysconfdir}/cups/certs

rm -f %{_localstatedir}/cache/cups/*.ipp %{_localstatedir}/cache/cups/*.cache

# Previous migration script unnecessarily put PageLogFormat into cups-files.conf

# (see bug #1148995)

FILE=%{_sysconfdir}/cups/cups-files.conf

for keyword in PageLogFormat; do

    /bin/sed -i -e "s,^$keyword,#$keyword,i" "$FILE" || :

done

# Because of moving logs to journal, we need to create placeholder files

# at /var/log/cups for users, whose are going to install CUPS on new OS

# machine with info message

%if 0%{?rhel} > 7 || 0%{?fedora} > 27

confignames=( "ErrorLog" "AccessLog" "PageLog" )

lognames=( "error_log" "access_log" "page_log" )

message="This CUPS log has been moved into journal by default unless changes have     been made in /etc/cups/cups-files.conf. Log messages can be got by \"$ journalctl -u  cups -e\""

for ((i=0;i<${#confignames[@]};i++));

do

  found=`%{_bindir}/grep -i "${confignames[i]} syslog" /etc/cups/cups-files.conf`

  if [ ! -z "$found" ]

  then

    if [ ! -f %{_localstatedir}/log/cups/${lognames[i]} ]

    then

      %{_bindir}/touch %{_localstatedir}/log/cups/${lognames[i]} || :

    fi

    perms=`%{_bindir}/ls -lah %{_localstatedir}/log/cups/${lognames[i]} | %{_bindir}/grep -v -e "\-rw-------" -e "root lp"`

    if [ ! -z "$perms" ]

    then

      # we need to set correct permissions and ownership because of possible

      # security issues

      # we need to have here, because previous CUPS releases had the bug.

      # Checking permissions and ownership here fixes it.

      %{_bindir}/chown root:lp %{_localstatedir}/log/cups/${lognames[i]} || :

      %{_bindir}/chmod 600 %{_localstatedir}/log/cups/${lognames[i]} || :

    fi

    lastmessage=`%{_bindir}/tail -n 1 %{_localstatedir}/log/cups/${lognames[i]} | %{_bindir}/grep "$message"`

    if [ -z "$lastmessage" ]

    then

      %{_bindir}/echo $message >> %{_localstatedir}/log/cups/${lognames[i]} || :

    fi

  fi

done

%endif

%{_bindir}/rm /var/cache/cups/*.data > /dev/null 2>&1

if [ -e /etc/systemd/system/printer.target.wants/cups.service ]

then

  %{_bindir}/systemctl enable cups.service > /dev/null 2>&1

fi

# 2013865 - if the directive is not in cupsd.conf, add it (needed during upgrades if

# user had changed the config file)

grep '^\s*IdleExitTimeout' %{_sysconfdir}/cups/cupsd.conf &> /dev/null || echo -e '\nIdleExitTimeout 0' \

>> %{_sysconfdir}/cups/cupsd.conf

exit 0

%post client

%if %{use_alternatives}

/usr/sbin/alternatives --install %{_bindir}/lpr print %{_bindir}/lpr.cups 40 \

	 --slave %{_bindir}/lp print-lp %{_bindir}/lp.cups \

	 --slave %{_bindir}/lpq print-lpq %{_bindir}/lpq.cups \

	 --slave %{_bindir}/lprm print-lprm %{_bindir}/lprm.cups \

	 --slave %{_bindir}/lpstat print-lpstat %{_bindir}/lpstat.cups \

	 --slave %{_bindir}/cancel print-cancel %{_bindir}/cancel.cups \

	 --slave %{_sbindir}/lpc print-lpc %{_sbindir}/lpc.cups \

	 --slave %{_mandir}/man1/cancel.1.gz print-cancelman %{_mandir}/man1/cancel-cups.1.gz \

	 --slave %{_mandir}/man1/lp.1.gz print-lpman %{_mandir}/man1/lp-cups.1.gz \

	 --slave %{_mandir}/man8/lpc.8.gz print-lpcman %{_mandir}/man8/lpc-cups.8.gz \

	 --slave %{_mandir}/man1/lpq.1.gz print-lpqman %{_mandir}/man1/lpq-cups.1.gz \

	 --slave %{_mandir}/man1/lpr.1.gz print-lprman %{_mandir}/man1/lpr-cups.1.gz \

	 --slave %{_mandir}/man1/lprm.1.gz print-lprmman %{_mandir}/man1/lprm-cups.1.gz \

	 --slave %{_mandir}/man1/lpstat.1.gz print-lpstatman %{_mandir}/man1/lpstat-cups.1.gz

%endif

exit 0

%post lpd

%systemd_post cups-lpd.socket

exit 0

%ldconfig_scriptlets libs

%preun

%systemd_preun %{name}.path %{name}.socket %{name}.service

exit 0

%preun client

%if %{use_alternatives}

if [ $1 -eq 0 ] ; then

	/usr/sbin/alternatives --remove print %{_bindir}/lpr.cups

fi

%endif

exit 0

%preun lpd

%systemd_preun cups-lpd.socket

exit 0

%postun

%systemd_postun_with_restart %{name}.path %{name}.socket %{name}.service

exit 0

%postun lpd

%systemd_postun_with_restart cups-lpd.socket

exit 0

%triggerin -- samba-client

ln -sf %{_libexecdir}/samba/cups_backend_smb %{cups_serverbin}/backend/smb || :

exit 0

%triggerun -- samba-client

[ $2 = 0 ] || exit 0

rm -f %{cups_serverbin}/backend/smb

%files -f %{name}.lang

%doc README.md CREDITS.md CHANGES.md

%dir %attr(0755,root,lp) %{_sysconfdir}/cups

%dir %attr(0755,root,lp) %{_localstatedir}/run/cups

%dir %attr(0511,lp,sys) %{_localstatedir}/run/cups/certs

%{_tmpfilesdir}/cups.conf

%{_tmpfilesdir}/cups-lp.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0640,root,lp) %{_sysconfdir}/cups/cupsd.conf

%attr(0640,root,lp) %{_sysconfdir}/cups/cupsd.conf.default

%verify(not md5 size mtime) %config(noreplace) %attr(0640,root,lp) %{_sysconfdir}/cups/cups-files.conf

%attr(0640,root,lp) %{_sysconfdir}/cups/cups-files.conf.default

%verify(not md5 size mtime) %config(noreplace) %attr(0644,root,lp) %{_sysconfdir}/cups/client.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0600,root,lp) %{_sysconfdir}/cups/classes.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0600,root,lp) %{_sysconfdir}/cups/printers.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0644,root,lp) %{_sysconfdir}/cups/snmp.conf

%attr(0640,root,lp) %{_sysconfdir}/cups/snmp.conf.default

%verify(not md5 size mtime) %config(noreplace) %attr(0640,root,lp) %{_sysconfdir}/cups/subscriptions.conf

#%%{_sysconfdir}/cups/interfaces