Mehmet InceandDaybreak Blue 5c336885d2 Harden CUPS printer discovery ...

Run cups-browsed as a locked service account with a dedicated cache and a focused systemd sandbox. Restrict automatic queues to driverless IPP printers, remove wheel from passwordless CUPS administration, replace cups-pdf with Polkit-backed setup, and migrate existing systems safely.

Reported-By: Erik Hunstad (Bad Sector Labs)

Co-Authored-By: Daybreak Blue <noreply@openai.com>

2026-08-27 18:00:12 +01:00

..

cups

Harden CUPS printer discovery

2026-08-27 18:00:12 +01:00

docker

Add etc/ source tree for package-shipped /etc files

2026-06-04 18:34:04 -04:00

fastfetch

Fit the About window to its rendered content (#6627)

2026-08-08 11:05:05 +02:00

gnupg

Add etc/ source tree for package-shipped /etc files

2026-06-04 18:34:04 -04:00

limine-entry-tool.d

Unpack the initramfs synchronously so Plymouth survives early boot

2026-07-24 11:30:55 -07:00

mkinitcpio.conf.d

Drop the kms hook when the proprietary NVIDIA driver handles early KMS (#6791)

2026-08-13 10:48:18 +02:00

modprobe.d

Add etc/ source tree for package-shipped /etc files

2026-06-04 18:34:04 -04:00

NetworkManager/conf.d

Drop Wi-Fi power save toggling in favor of keeping it off

2026-07-24 10:34:19 -07:00

plymouth

Add etc/ source tree for package-shipped /etc files

2026-06-04 18:34:04 -04:00

profile.d

Split user defaults into skel seed, finalize, and resync

2026-06-04 18:38:25 -04:00

sddm.conf.d

install: add split system and user targets

2026-06-04 18:35:01 -04:00

security

Add etc/ source tree for package-shipped /etc files

2026-06-04 18:34:04 -04:00

sudoers.d

Constrain the tzupdate sudoers rule to a single timezone argument (#8194)

2026-08-25 22:30:09 +02:00

sysctl.d

Additional zram + swap tuning

2026-07-27 09:48:20 -04:00

systemd

Harden CUPS printer discovery

2026-08-27 18:00:12 +01:00

sysusers.d

Harden CUPS printer discovery

2026-08-27 18:00:12 +01:00

tmpfiles.d

Additional zram + swap tuning

2026-07-27 09:48:20 -04:00

nsswitch.conf

Add etc/ source tree for package-shipped /etc files

2026-06-04 18:34:04 -04:00