%global use_alternatives 1

%global lspp 1 

# {_exec_prefix}/lib/cups is correct, even on x86_64.

# It is not used for shared objects but for executables.

# It's more of a libexec-style ({_libexecdir}) usage,

# but we use lib for compatibility with 3rd party drivers (at upstream request).

%global cups_serverbin %{_exec_prefix}/lib/cups

#%%global prever rc1

#%%global VERSION %%{version}%%{prever}

%global VERSION %{version}

# Openprinting version

%global OP_VER op2

Summary: CUPS printing system

Name: cups

Epoch: 1

Version: 2.3.3%{OP_VER}

Release: 16%{?dist}

License: ASL 2.0

Url: http://www.cups.org/

# Apple stopped uploading the new versions into github, use OpenPrinting fork

Source0: https://github.com/OpenPrinting/cups/releases/download/v%{VERSION}/cups-%{VERSION}-source.tar.gz

# Pixmap for desktop file

Source1: cupsprinter.png

# cups_serverbin macro definition for use during builds

Source2: macros.cups

# PAM enablement, very old patch, not even git can track when or why

# the patch was added.

Patch1: cups-system-auth.patch

# cups-config from devel package conflicted on multilib arches,

# fixed hack with pkg-config calling for gnutls' libdir variable

Patch2: cups-multilib.patch

# if someone makes a change to banner files, then there will <banner>.rpmnew

# with next update of cups-filters - this patch makes sure the banner file 

# changed by user is used and .rpmnew or .rpmsave is ignored

# Note: This could be rewrite with use a kind of #define and send to upstream

Patch3: cups-banners.patch

# don't export ssl libs to cups-config - can't find the reason.

Patch4: cups-no-export-ssllibs.patch

# enables old uri usb:/dev/usb/lp0 - leave it here for users of old printers

Patch5: cups-direct-usb.patch

# when system workload is high, timeout for cups-driverd can be reached -

# increase the timeout

Patch6: cups-driverd-timeout.patch

# usb backend didn't get any notification about out-of-paper because of kernel 

Patch7: cups-usb-paperout.patch

# uri compatibility with old Fedoras

Patch8: cups-uri-compat.patch

# use IP_FREEBIND, because cupsd cannot bind to not yet existing IP address

# by default

Patch9: cups-freebind.patch

# add support of multifile

Patch10: cups-ipp-multifile.patch

# prolongs web ui timeout

Patch11: cups-web-devices-timeout.patch

# failover backend for implementing failover functionality

# TODO: move it to the cups-filters upstream

Patch12: cups-failover-backend.patch

# add device id for dymo printer

Patch13: cups-dymo-deviceid.patch

# add [Job N] in logs

Patch14: cups-logs.patch

%if %{lspp}

# selinux and audit enablement for CUPS - needs work and CUPS upstream wants

# to have these features implemented their way in the future

Patch100: cups-lspp.patch

%endif

#### UPSTREAM PATCHES (starts with 1000) ####

# 1949053 - CUPS doesn't start if sssd starts after cupsd

Patch15: cups-nssuserlookup-target.patch

# 1960160 - PreserveJobHistory/JobFiles aren't applied after

# the first cupsd restart right after successful print

Patch16: cups-cleanfiles.patch

# 1949067 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP

Patch17: cups-validate-1st.patch

# 2018948 - Unauthenticated users can't move print jobs in Web UI

Patch18: 0001-cgi-bin-ipp-var.c-Use-guest-user-for-Move-Job-when-n.patch

# 1999955 - Printing of banner before PCL file only prints banner

Patch19: 0001-scheduler-job.c-use-gziptoany-for-raw-files-not-just.patch

# 2006713 - Trying to restart and hold a job doesn't work

Patch20: cups-restart-job-hold-until.patch

# 2022365 - Annocheck fails due incorrect flags during compilation/linking

Patch21: cups-fstack-strong.patch

# 2019842 - Add more warning messages about drivers going deprecated

Patch22: cups-deprecate-drivers.patch

# 2018955 - RFE: Implement IdleExitTimeout configuration during build

Patch23: 0001-Add-with-idle-exit-timeout-configure-option.patch

# 2018951 - RFE: Implement TimeoutStartSec configuration during build

Patch24: 0001-Add-with-systemd-timeoutstartsec-configure-option.patch

# 1935051 - [FIPS] cups library can use sha-1 and uses internal MD5

Patch25: cups-fips-restrict-md5.patch

# Memory leak fixes (bug #1964975)

# https://github.com/OpenPrinting/cups/pull/322

Patch26: 0001-cups-http-encode-memleaks-fixes-issue-322.patch

# 2073266 - 30-second delays printing to Windows 2016 server via HTTPS

Patch27: 0001-cups-tls-gnutls.c-Use-always-GNUTLS_SHUT_WR.patch

# 2091997 - manpage update to acknowledge order dependency of -h option

Patch28: 0001-Update-man-pages-for-h-option-Issue-357.patch

# CVE-2022-26691 cups: authorization bypass when using "local" authorization

Patch29: 0001-scheduler-cert.c-Fix-string-comparison-fixes-CVE-202.patch

##### Patches removed because IMHO they aren't no longer needed

##### but still I'll leave them in git in case their removal

##### breaks something. 

BuildRequires: automake

# gcc and gcc-c++ is no longer in buildroot by default

# gcc for most of files

BuildRequires: gcc

# gcc-c++ for ppdc and cups-driverd

Buildrequires: gcc-c++ 

BuildRequires: krb5-devel

BuildRequires: libacl-devel

# make is used for compilation

BuildRequires: make

BuildRequires: openldap-devel

BuildRequires: pam-devel

BuildRequires: pkgconf-pkg-config

BuildRequires: pkgconfig(avahi-client)

BuildRequires: pkgconfig(dbus-1)

BuildRequires: pkgconfig(gnutls)

BuildRequires: pkgconfig(libsystemd)

BuildRequires: pkgconfig(libusb-1.0)

# Make sure we get postscriptdriver tags.

BuildRequires: python3-cups

BuildRequires: systemd

# needed for systemd rpm macros according FPG

BuildRequires: systemd-rpm-macros

# needed for decompressing functions when reading from gzipped ppds

BuildRequires: zlib-devel

%if %{lspp}

BuildRequires: libselinux-devel

BuildRequires: audit-libs-devel

%endif

# getaddrinfo from glibc needs nss-mdns or systemd-resolved for resolving

# mdns .local addresses. Don't require a specific package for now and let

# the user to decide what to use

# just recommend nss-mdns for Fedora for now to have working default, but

# don't hardwire it for resolved users

%if 0%{?fedora}

Recommends: nss-mdns

%endif

# avahi is needed for mDNS discovery and sharing queues

Recommends: avahi

# We ship udev rules which use setfacl.

Requires: acl

Requires: %{name}-client%{?_isa} = %{epoch}:%{version}-%{release}

Requires: %{name}-filesystem = %{epoch}:%{version}-%{release}

# Make sure we have some filters for converting to raster format.

Requires: cups-filters

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

Requires: dbus

Requires: systemd

# Requires working PrivateTmp (bug #807672)

Requires(pre): systemd

Requires(post): systemd

Requires(post): grep, sed

Requires(preun): systemd

Requires(postun): systemd

%package client

Summary: CUPS printing system - client programs

License: GPLv2

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

%if %{use_alternatives}

Provides: /usr/bin/lpq /usr/bin/lpr /usr/bin/lp /usr/bin/cancel /usr/bin/lprm /usr/bin/lpstat

Requires: /usr/sbin/alternatives

%endif

Provides: lpr

%package devel

Summary: CUPS printing system - development environment

License: LGPLv2

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

Requires: gnutls-devel

Requires: krb5-devel

Requires: zlib-devel

%package libs

Summary: CUPS printing system - libraries

License: LGPLv2 and zlib

%package filesystem

Summary: CUPS printing system - directory layout

BuildArch: noarch

%package lpd

Summary: CUPS printing system - lpd emulation

Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

Provides: lpd

%package ipptool

Summary: CUPS printing system - tool for performing IPP requests

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

# ippfind needs avahi for printer discovery

Requires: avahi

# mdns address resolver (nss-mdns or systemd-resolved) is needed too,

# but don't require a specific package for now and let the user to choose

# what to use

# just recommend nss-mdns for Fedora for now to have working default, but

# don't hardwire it for resolved users

%if 0%{?fedora}

Recommends: nss-mdns

%endif

%package printerapp

Summary: CUPS printing system - tools for printer application

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

# ippeveprinter needs avahi for registering and sharing printer

Requires: avahi

# mdns address resolver (nss-mdns or systemd-resolved) is needed too,

# but don't require a specific package for now and let the user to choose

# what to use

# just recommend nss-mdns for Fedora for now to have working default, but

# don't hardwire it for resolved users

%if 0%{?fedora}

Recommends: nss-mdns

%endif

%description

CUPS printing system provides a portable printing layer for

UNIX® operating systems. It has been developed by Apple Inc.

to promote a standard printing solution for all UNIX vendors and users.

CUPS provides the System V and Berkeley command-line interfaces.

%description client

CUPS printing system provides a portable printing layer for

UNIX® operating systems. This package contains command-line client

programs.

%description devel

CUPS printing system provides a portable printing layer for

UNIX® operating systems. This is the development package for creating

additional printer drivers, and other CUPS services.

%description libs

CUPS printing system provides a portable printing layer for

UNIX® operating systems. It has been developed by Apple Inc.

to promote a standard printing solution for all UNIX vendors and users.

CUPS provides the System V and Berkeley command-line interfaces.

The cups-libs package provides libraries used by applications to use CUPS

natively, without needing the lp/lpr commands.

%description filesystem

CUPS printing system provides a portable printing layer for

UNIX® operating systems. This package provides some directories which are

required by other packages that add CUPS drivers (i.e. filters, backends etc.).

%description lpd

CUPS printing system provides a portable printing layer for

UNIX® operating systems. This is the package that provides standard

lpd emulation.

%description ipptool

Sends IPP requests to the specified URI and tests and/or displays the results.

%description printerapp

Provides IPP everywhere printer application ippeveprinter and tools for printing

PostScript and HP PCL document formats - ippevepcl and ippeveps. The printer

application enables older printers for IPP everywhere standard - so if older printer

is installed with a printer application, its print queue acts as IPP everywhere printer

to CUPS daemon. This solution will substitute printer drivers and raw queues in the future.

%prep

%setup -q -n cups-%{VERSION}

# Use the system pam configuration.

%patch1 -p1 -b .system-auth

# Prevent multilib conflict in cups-config script.

%patch2 -p1 -b .multilib

# Ignore rpm save/new files in the banners directory.

%patch3 -p1 -b .banners

# Don't export SSLLIBS to cups-config.

%patch4 -p1 -b .no-export-ssllibs

# Allow file-based usb device URIs.

%patch5 -p1 -b .direct-usb

# Increase driverd timeout to 70s to accommodate foomatic (bug #744715).

%patch6 -p1 -b .driverd-timeout

# Support for errno==ENOSPACE-based USB paper-out reporting.

%patch7 -p1 -b .usb-paperout

# Allow the usb backend to understand old-style URI formats.

%patch8 -p1 -b .uri-compat

# Use IP_FREEBIND socket option when binding listening sockets (bug #970809).

%patch9 -p1 -b .freebind

# Fixes for jobs with multiple files and multiple formats.

%patch10 -p1 -b .ipp-multifile

# Increase web interface get-devices timeout to 10s (bug #996664).

%patch11 -p1 -b .web-devices-timeout

# Add failover backend (bug #1689209)

%patch12 -p1 -b .failover

# Added IEEE 1284 Device ID for a Dymo device (bug #747866).

%patch13 -p1 -b .dymo-deviceid

# UPSTREAM PATCHES

# add [Job N] to logs

%patch14 -p1 -b .logs

# 1949053 - CUPS doesn't start if sssd starts after cupsd

%patch15 -p1 -b .nsslookup

# 1960160 - PreserveJobHistory/JobFiles aren't applied after

# the first cupsd restart right after successful print

%patch16 -p1 -b .cleanfiles

# 1949067 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP

%patch17 -p1 -b .validate-retry

# 2018948 - Unauthenticated users can't move print jobs in Web UI

%patch18 -p1 -b .move-job

# 1999955 - Printing of banner before PCL file only prints banner

%patch19 -p1 -b .banner-rawfiles

# 2006713 - Trying to restart and hold a job doesn't work

%patch20 -p1 -b .restart-hold-job

# 2022365 - Annocheck fails due incorrect flags during compilation/linking

%patch21 -p1 -b .fstack-strong

# 2019842 - Add more warning messages about drivers going deprecated

%patch22 -p1 -b .deprecate-warnings

# 2018955 - RFE: Implement IdleExitTimeout configuration during build

%patch23 -p1 -b .idleexittimeout

# 2018951 - RFE: Implement TimeoutStartSec configuration during build

%patch24 -p1 -b .conf-timeoutstartsec

# 1935051 - [FIPS] cups library can use sha-1 and uses internal MD5

%patch25 -p1 -b .restrict-md5

# 1964975 - Memory leak fixes

%patch26 -p1 -b .memleak-fixes

# 2073266 - 30-second delays printing to Windows 2016 server via HTTPS

%patch27 -p1 -b .gnutlsbye

# 2091997 - manpage update to acknowledge order dependency of -h option

%patch28 -p1 -b .manpage-update

# CVE-2022-26691 cups: authorization bypass when using "local" authorization

%patch29 -p1 -b .cve26691

%if %{lspp}

# LSPP support.

%patch100 -p1 -b .lspp

%endif

# Log to the system journal by default (bug #1078781, bug #1519331).

sed -i -e 's,^ErrorLog .*$,ErrorLog syslog,' conf/cups-files.conf.in

sed -i -e 's,^AccessLog .*$,AccessLog syslog,' conf/cups-files.conf.in

sed -i -e 's,^PageLog .*,PageLog syslog,' conf/cups-files.conf.in

# Let's look at the compilation command lines.

perl -pi -e "s,^.SILENT:,," Makedefs.in

# remove this once we don't have any patches changing configure stuff

aclocal -I config-scripts

autoconf -f -I config-scripts

%build

# cups can use different compiler if it is installed, so set to GCC for to be sure

export CC=%{__cc}

export CXX=%{__cxx}

# add Fedora specific flags to DSOFLAGS

export DSOFLAGS="$DSOFLAGS $RPM_LD_FLAGS"

export CFLAGS="$CFLAGS $RPM_OPT_FLAGS -DLDAP_DEPRECATED=1"

export CXXFLAGS="$CXXFLAGS $RPM_OPT_FLAGS -DLDAP_DEPRECATED=1"

export LDFLAGS="$LDFLAGS $RPM_LD_FLAGS -Wall -fstack-clash-protection -D_FORTIFY_SOURCE=2"

# --enable-debug to avoid stripping binaries

%configure --with-docdir=%{_datadir}/%{name}/www --enable-debug \

%if %{lspp}

	--enable-lspp \

%endif

  --with-exe-file-perm=0755 \

	--with-cupsd-file-perm=0755 \

	--with-log-file-perm=0600 \

	--enable-relro \

	--with-dbusdir=%{_sysconfdir}/dbus-1 \

	--with-php=/usr/bin/php-cgi \

	--enable-avahi \

	--enable-threads \

	--enable-gnutls \

	--enable-webif \

	--with-xinetd=no \

	--with-access-log-level=actions \

	--enable-page-logging \

	--with-rundir=%{_rundir}/cups \

	--enable-sync-on-close \

%if 0%{?rhel}

  --without-idle-exit-timeout \

  --without-systemd-timeoutstartsec \

%endif

	localedir=%{_datadir}/locale

# If we got this far, all prerequisite libraries must be here.

%make_build

%install

# %%make_install macro results into permission error during install phase,

# because it sets INSTALL env to 'install -p'.

# use the old make invocation for now, fix this upstream when upstream will

# have a time for github issues

make install DESTDIR=%{buildroot}

rm -rf	%{buildroot}%{_initddir} \

	%{buildroot}%{_sysconfdir}/init.d \

	%{buildroot}%{_sysconfdir}/rc?.d

mkdir -p %{buildroot}%{_unitdir}

find %{buildroot}%{_datadir}/cups/model -name "*.ppd" |xargs gzip -n9f

%if %{use_alternatives}

pushd %{buildroot}%{_bindir}

for i in cancel lp lpq lpr lprm lpstat; do

	mv $i $i.cups

done

cd %{buildroot}%{_sbindir}

mv lpc lpc.cups

cd %{buildroot}%{_mandir}/man1

for i in cancel lp lpq lpr lprm lpstat; do

	mv $i.1 $i-cups.1

done

cd %{buildroot}%{_mandir}/man8

mv lpc.8 lpc-cups.8

popd

%endif

mkdir -p %{buildroot}%{_datadir}/pixmaps %{buildroot}%{_sysconfdir}/X11/sysconfig %{buildroot}%{_sysconfdir}/X11/applnk/System

install -p -m 644 %{SOURCE1} %{buildroot}%{_datadir}/pixmaps

# Ship an rpm macro for where to put driver executables.

mkdir -p %{buildroot}%{_rpmconfigdir}/macros.d

install -m 0644 %{SOURCE2} %{buildroot}%{_rpmconfigdir}/macros.d

# Ship a printers.conf file, and a client.conf file.  That way, they get

# their SELinux file contexts set correctly.

touch %{buildroot}%{_sysconfdir}/cups/printers.conf

touch %{buildroot}%{_sysconfdir}/cups/classes.conf

touch %{buildroot}%{_sysconfdir}/cups/client.conf

touch %{buildroot}%{_sysconfdir}/cups/subscriptions.conf

touch %{buildroot}%{_sysconfdir}/cups/lpoptions

# deny MD5 digest authentication by default in client.conf

cat > %{buildroot}%{_sysconfdir}/cups/client.conf <

# MD5 Digest authentication is turned off by default

# because MD5 is marked as insecure for authentication.

#

# If you need MD5 Digest authentication and you are aware of

# potential security risk, turn MD5 Digest authentication on

# by changing the directive value to 'None'.

DigestOptions DenyMD5

EOF

# LSB 3.2 printer driver directory

mkdir -p %{buildroot}%{_datadir}/ppd

# Remove unshipped files.

rm -rf %{buildroot}%{_mandir}/cat? %{buildroot}%{_mandir}/*/cat?

rm -f %{buildroot}%{_datadir}/applications/cups.desktop

rm -rf %{buildroot}%{_datadir}/icons

# there are pdf-banners shipped with cups-filters (#919489)

rm -rf %{buildroot}%{_datadir}/cups/banners

rm -f %{buildroot}%{_datadir}/cups/data/testprint

# install /usr/lib/tmpfiles.d/cups.conf (bug #656566, bug #893834)

mkdir -p %{buildroot}%{_tmpfilesdir}

cat > %{buildroot}%{_tmpfilesdir}/cups.conf <

# See tmpfiles.d(5) for details

d %{_rundir}/cups 0755 root lp -

d %{_rundir}/cups/certs 0511 lp sys -

d /var/spool/cups/tmp - - - 30d

EOF

# /usr/lib/tmpfiles.d/cups-lp.conf (bug #812641)

cat > %{buildroot}%{_tmpfilesdir}/cups-lp.conf <

# Legacy parallel port character device nodes, to trigger the

# auto-loading of the kernel module on access.

#

# See tmpfiles.d(5) for details

c /dev/lp0 0660 root lp - 6:0

c /dev/lp1 0660 root lp - 6:1

c /dev/lp2 0660 root lp - 6:2

c /dev/lp3 0660 root lp - 6:3

EOF

# create server.conf into cups.service.d directory. The file is needed

# to automatically start cups.service during startup if enabled

mkdir -p %{buildroot}%{_unitdir}/cups.service.d

cat > %{buildroot}%{_unitdir}/cups.service.d/server.conf <

[Install]

WantedBy=multi-user.target

EOF

find %{buildroot} -type f -o -type l | sed '

s:.*\('%{_datadir}'/\)\([^/_]\+\)\(.*\.po$\):%lang(\2) \1\2\3:

/^%lang(C)/d

/^\([^%].*\)/d

' > %{name}.lang

%post

%systemd_post %{name}.path %{name}.socket %{name}.service

# remove this after F36 is EOL

# - previously the file was empty by default, so check whether the directive exists

#   and if not, add the directive+value

# - we don't check for directive value in case some users already know they need MD5

#   Digest authentication, so we won't break their setup with every update

# - ^\s* prevents matching comments and ignores whitespaces at the beginning

grep '^\s*DigestOptions' %{_sysconfdir}/cups/client.conf &> /dev/null || echo 'DigestOptions DenyMD5' \

>> %{_sysconfdir}/cups/client.conf

# Because of moving logs to journal, we need to create placeholder files

# at /var/log/cups for users, whose are going to install CUPS on new OS

# machine with info message

%if 0%{?rhel} > 7 || 0%{?fedora} > 27

confignames=( "ErrorLog" "AccessLog" "PageLog" )

lognames=( "error_log" "access_log" "page_log" )

message="This CUPS log has been moved into journal by default unless changes have     been made in /etc/cups/cups-files.conf. Log messages can be got by \"$ journalctl -u  cups -e\""

for ((i=0;i<${#confignames[@]};i++));

do

  found=`%{_bindir}/grep -i "${confignames[i]} syslog" /etc/cups/cups-files.conf`

  if [ ! -z "$found" ]

  then

    if [ ! -f %{_localstatedir}/log/cups/${lognames[i]} ]

    then

      %{_bindir}/touch %{_localstatedir}/log/cups/${lognames[i]} || :

    fi

    perms=`%{_bindir}/ls -lah %{_localstatedir}/log/cups/${lognames[i]} | %{_bindir}/grep -v -e "\-rw-------" -e "root lp"`

    if [ ! -z "$perms" ]

    then

      # we need to set correct permissions and ownership because of possible

      # security issues

      # we need to have it here, because previous CUPS releases had the bug.

      # Checking permissions and ownership here fixes it.

      %{_bindir}/chown root:lp %{_localstatedir}/log/cups/${lognames[i]} || :

      %{_bindir}/chmod 600 %{_localstatedir}/log/cups/${lognames[i]} || :

    fi

    lastmessage=`%{_bindir}/tail -n 1 %{_localstatedir}/log/cups/${lognames[i]} | %{_bindir}/grep "$message"`

    if [ -z "$lastmessage" ]

    then

      %{_bindir}/echo $message >> %{_localstatedir}/log/cups/${lognames[i]} || :

    fi

  fi

done

%endif

exit 0

%post client

%if %{use_alternatives}

/usr/sbin/alternatives --install %{_bindir}/lpr print %{_bindir}/lpr.cups 40 \

	 --slave %{_bindir}/lp print-lp %{_bindir}/lp.cups \

	 --slave %{_bindir}/lpq print-lpq %{_bindir}/lpq.cups \

	 --slave %{_bindir}/lprm print-lprm %{_bindir}/lprm.cups \

	 --slave %{_bindir}/lpstat print-lpstat %{_bindir}/lpstat.cups \

	 --slave %{_bindir}/cancel print-cancel %{_bindir}/cancel.cups \

	 --slave %{_sbindir}/lpc print-lpc %{_sbindir}/lpc.cups \

	 --slave %{_mandir}/man1/cancel.1.gz print-cancelman %{_mandir}/man1/cancel-cups.1.gz \

	 --slave %{_mandir}/man1/lp.1.gz print-lpman %{_mandir}/man1/lp-cups.1.gz \

	 --slave %{_mandir}/man8/lpc.8.gz print-lpcman %{_mandir}/man8/lpc-cups.8.gz \

	 --slave %{_mandir}/man1/lpq.1.gz print-lpqman %{_mandir}/man1/lpq-cups.1.gz \

	 --slave %{_mandir}/man1/lpr.1.gz print-lprman %{_mandir}/man1/lpr-cups.1.gz \

	 --slave %{_mandir}/man1/lprm.1.gz print-lprmman %{_mandir}/man1/lprm-cups.1.gz \

	 --slave %{_mandir}/man1/lpstat.1.gz print-lpstatman %{_mandir}/man1/lpstat-cups.1.gz || :

%endif

%post lpd

%systemd_post cups-lpd.socket

%ldconfig_scriptlets libs

%preun

%systemd_preun %{name}.path %{name}.socket %{name}.service

%preun client

%if %{use_alternatives}

if [ $1 -eq 0 ] ; then

	/usr/sbin/alternatives --remove print %{_bindir}/lpr.cups || :

fi

%endif

%preun lpd

%systemd_preun cups-lpd.socket

%postun

%systemd_postun_with_restart %{name}.path %{name}.socket %{name}.service

%postun lpd

%systemd_postun_with_restart cups-lpd.socket

%triggerin -- samba-client

ln -sf %{_libexecdir}/samba/cups_backend_smb %{cups_serverbin}/backend/smb || :

%triggerun -- samba-client

[ $2 = 0 ] || exit 0

rm -f %{cups_serverbin}/backend/smb

%files -f %{name}.lang

%doc README.md CREDITS.md CHANGES.md

%{_bindir}/cupstestppd

%{_bindir}/ppd*

%{_sbindir}/*

# client subpackage

%exclude %{_sbindir}/lpc.cups

%dir %{cups_serverbin}/daemon

%{cups_serverbin}/daemon/cups-deviced

%{cups_serverbin}/daemon/cups-driverd

%{cups_serverbin}/daemon/cups-exec

%{cups_serverbin}/backend/*

%{cups_serverbin}/cgi-bin

%{cups_serverbin}/filter/*

%{cups_serverbin}/monitor

%{cups_serverbin}/notifier

%{_datadir}/cups/drv/sample.drv

%{_datadir}/cups/examples

%{_datadir}/cups/mime/mime.types

%{_datadir}/cups/mime/mime.convs

%{_datadir}/cups/ppdc/*.defs

%{_datadir}/cups/ppdc/*.h

%dir %{_datadir}/cups/templates

%{_datadir}/cups/templates/*.tmpl

%dir %{_datadir}/cups/templates/de

%{_datadir}/cups/templates/de/*.tmpl

%dir %{_datadir}/cups/templates/es

%{_datadir}/cups/templates/es/*.tmpl

%dir %{_datadir}/cups/templates/fr

%{_datadir}/cups/templates/fr/*.tmpl

%dir %{_datadir}/cups/templates/ja

%{_datadir}/cups/templates/ja/*.tmpl

%dir %{_datadir}/cups/templates/pt_BR

%{_datadir}/cups/templates/pt_BR/*.tmpl

%dir %{_datadir}/cups/templates/ru

%{_datadir}/cups/templates/ru/*.tmpl

%dir %{_datadir}/%{name}/usb

%{_datadir}/%{name}/usb/org.cups.usb-quirks

%dir %{_datadir}/%{name}/www

%{_datadir}/%{name}/www/images

%{_datadir}/%{name}/www/*.css

# 1658673 - html files cannot be docs, because CUPS web ui will not have

# introduction page on Fedora Docker image (because rpms are installed

# without docs there because of space reasons)

%{_datadir}/%{name}/www/index.html

%{_datadir}/%{name}/www/help

%{_datadir}/%{name}/www/robots.txt

%{_datadir}/%{name}/www/de/index.html

%{_datadir}/%{name}/www/es/index.html

%{_datadir}/%{name}/www/ja/index.html

%{_datadir}/%{name}/www/ru/index.html

%{_datadir}/%{name}/www/pt_BR/index.html

%{_datadir}/%{name}/www/apple-touch-icon.png

%dir %{_datadir}/%{name}/www/de

%dir %{_datadir}/%{name}/www/es

%dir %{_datadir}/%{name}/www/ja

%dir %{_datadir}/%{name}/www/pt_BR

%dir %{_datadir}/%{name}/www/ru

%{_datadir}/pixmaps/cupsprinter.png

%dir %attr(1770,root,lp) %{_localstatedir}/spool/cups/tmp

%dir %attr(0710,root,lp) %{_localstatedir}/spool/cups

%dir %attr(0755,lp,sys) %{_localstatedir}/log/cups

%{_mandir}/man[1578]/*

# client subpackage

%exclude %{_mandir}/man1/lp*.1.gz

%exclude %{_mandir}/man1/cancel-cups.1.gz

%exclude %{_mandir}/man8/lpc-cups.8.gz

# devel subpackage

%exclude %{_mandir}/man1/cups-config.1.gz

# ipptool subpackage

%exclude %{_mandir}/man1/ipptool.1.gz

%exclude %{_mandir}/man5/ipptoolfile.5.gz

# lpd subpackage

%exclude %{_mandir}/man8/cups-lpd.8.gz

# printerapp

%exclude %{_mandir}/man1/ippeveprinter.1.gz

%exclude %{_mandir}/man7/ippevepcl.7.gz

%exclude %{_mandir}/man7/ippeveps.7.gz

%dir %attr(0755,root,lp) %{_rundir}/cups

%dir %attr(0511,lp,sys) %{_rundir}/cups/certs

%dir %attr(0755,root,lp) %{_sysconfdir}/cups

%attr(0640,root,lp) %{_sysconfdir}/cups/cupsd.conf.default

%verify(not md5 size mtime) %config(noreplace) %attr(0640,root,lp) %{_sysconfdir}/cups/cupsd.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0640,root,lp) %{_sysconfdir}/cups/cups-files.conf

%attr(0640,root,lp) %{_sysconfdir}/cups/cups-files.conf.default

%verify(not md5 size mtime) %config(noreplace) %attr(0644,root,lp) %{_sysconfdir}/cups/client.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0600,root,lp) %{_sysconfdir}/cups/classes.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0600,root,lp) %{_sysconfdir}/cups/printers.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0644,root,lp) %{_sysconfdir}/cups/snmp.conf

%attr(0640,root,lp) %{_sysconfdir}/cups/snmp.conf.default

%verify(not md5 size mtime) %config(noreplace) %attr(0640,root,lp) %{_sysconfdir}/cups/subscriptions.conf

%verify(not md5 size mtime) %config(noreplace) %attr(0644,root,lp) %{_sysconfdir}/cups/lpoptions

%dir %attr(0755,root,lp) %{_sysconfdir}/cups/ppd

%dir %attr(0700,root,lp) %{_sysconfdir}/cups/ssl

%config(noreplace) %{_sysconfdir}/dbus-1/system.d/cups.conf

%config(noreplace) %{_sysconfdir}/pam.d/cups

%{_tmpfilesdir}/cups.conf

%{_tmpfilesdir}/cups-lp.conf

%dir %{_unitdir}/%{name}.service.d

%attr(0644, root, root)%{_unitdir}/%{name}.service.d/server.conf

%attr(0644, root, root)%{_unitdir}/%{name}.service

%attr(0644, root, root)%{_unitdir}/%{name}.socket

%attr(0644, root, root)%{_unitdir}/%{name}.path

%files client

%{_bindir}/cancel*

%{_bindir}/lp*

%{_sbindir}/lpc.cups

%{_mandir}/man1/cancel-cups.1.gz

%{_mandir}/man1/lp*.1.gz

%{_mandir}/man8/lpc-cups.8.gz

%files libs

%{license} LICENSE

%{license} NOTICE

%{_libdir}/libcups.so.2

%{_libdir}/libcupsimage.so.2

%files filesystem