Von kangaroo72, 2 Monate vorher, geschrieben in Plain Text.
Einbetten
  1. #
  2. # Configuration file for the CUPS scheduler.  See "man cupsd.conf" for a
  3. # complete description of this file.
  4. #
  5.  
  6. # Log general information in error_log - change "warn" to "debug"
  7. # for troubleshooting...
  8. LogLevel warn
  9. PageLogFormat
  10.  
  11. # Deactivate CUPS' internal logrotating, as we provide a better one, especially
  12. # LogLevel debug2 gets usable now
  13. MaxLogSize 0
  14.  
  15. # Only listen for connections from the local machine.
  16. Port 631
  17. Listen /run/cups/cups.sock
  18.  
  19. # Show shared printers on the local network.
  20. Browsing On
  21. BrowseLocalProtocols dnssd
  22.  
  23. # Default authentication type, when authentication is required...
  24. DefaultAuthType Basic
  25.  
  26. # Web interface setting...
  27. WebInterface Yes
  28.  
  29. # Restrict access to the server...
  30. <Location />
  31.   Order allow,deny
  32.   Allow @LOCAL
  33. </Location>
  34.  
  35. # Restrict access to the admin pages...
  36. <Location /admin>
  37.   AuthType Default
  38.   Require valid-user
  39.   Order allow,deny
  40.   Allow @LOCAL
  41. </Location>
  42.  
  43. # Restrict access to configuration files...
  44. <Location /admin/conf>
  45.   AuthType Default
  46.   Require user @SYSTEM
  47.   Order allow,deny
  48. </Location>
  49.  
  50. # Restrict access to log files...
  51. <Location /admin/log>
  52.   AuthType Default
  53.   Require user @SYSTEM
  54.   Order allow,deny
  55. </Location>
  56.  
  57. # Set the default printer/job policies...
  58. <Policy default>
  59.   # Job/subscription privacy...
  60.   JobPrivateAccess default
  61.   JobPrivateValues default
  62.   SubscriptionPrivateAccess default
  63.   SubscriptionPrivateValues default
  64.  
  65.   # Job-related operations must be done by the owner or an administrator...
  66.   <Limit Create-Job Print-Job Print-URI Validate-Job>
  67.     Order deny,allow
  68.   </Limit>
  69.  
  70.   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
  71.     Require user @OWNER @SYSTEM
  72.     Order deny,allow
  73.   </Limit>
  74.  
  75.   # All administration operations require an administrator to authenticate...
  76.   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
  77.     AuthType Default
  78.     Require user @SYSTEM
  79.     Order deny,allow
  80.   </Limit>
  81.  
  82.   # All printer operations require a printer operator to authenticate...
  83.   <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
  84.     AuthType Default
  85.     Require user @SYSTEM
  86.     Order deny,allow
  87.   </Limit>
  88.  
  89.   # Only the owner or an administrator can cancel or authenticate a job...
  90.   <Limit Cancel-Job CUPS-Authenticate-Job>
  91.     Require user @OWNER @SYSTEM
  92.     Order deny,allow
  93.   </Limit>
  94.  
  95.   <Limit All>
  96.     Order deny,allow
  97.   </Limit>
  98. </Policy>
  99.  
  100. # Set the authenticated printer/job policies...
  101. <Policy authenticated>
  102.   # Job/subscription privacy...
  103.   JobPrivateAccess default
  104.   JobPrivateValues default
  105.   SubscriptionPrivateAccess default
  106.   SubscriptionPrivateValues default
  107.  
  108.   # Job-related operations must be done by the owner or an administrator...
  109.   <Limit Create-Job Print-Job Print-URI Validate-Job>
  110.     AuthType Default
  111.     Order deny,allow
  112.   </Limit>
  113.  
  114.   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
  115.     AuthType Default
  116.     Require user @OWNER @SYSTEM
  117.     Order deny,allow
  118.   </Limit>
  119.  
  120.   # All administration operations require an administrator to authenticate...
  121.   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
  122.     AuthType Default
  123.     Require user @SYSTEM
  124.     Order deny,allow
  125.   </Limit>
  126.  
  127.   # All printer operations require a printer operator to authenticate...
  128.   <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
  129.     AuthType Default
  130.     Require user @SYSTEM
  131.     Order deny,allow
  132.   </Limit>
  133.  
  134.   # Only the owner or an administrator can cancel or authenticate a job...
  135.   <Limit Cancel-Job CUPS-Authenticate-Job>
  136.     AuthType Default
  137.     Require user @OWNER @SYSTEM
  138.     Order deny,allow
  139.   </Limit>
  140.  
  141.   <Limit All>
  142.     Order deny,allow
  143.   </Limit>
  144. </Policy>
  145.  
  146. # Set the kerberized printer/job policies...
  147. <Policy kerberos>
  148.   # Job/subscription privacy...
  149.   JobPrivateAccess default
  150.   JobPrivateValues default
  151.   SubscriptionPrivateAccess default
  152.   SubscriptionPrivateValues default
  153.  
  154.   # Job-related operations must be done by the owner or an administrator...
  155.   <Limit Create-Job Print-Job Print-URI Validate-Job>
  156.     AuthType Negotiate
  157.     Order deny,allow
  158.   </Limit>
  159.  
  160.   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
  161.     AuthType Negotiate
  162.     Require user @OWNER @SYSTEM
  163.     Order deny,allow
  164.   </Limit>
  165.  
  166.   # All administration operations require an administrator to authenticate...
  167.   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
  168.     AuthType Default
  169.     Require user @SYSTEM
  170.     Order deny,allow
  171.   </Limit>
  172.  
  173.   # All printer operations require a printer operator to authenticate...
  174.   <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
  175.     AuthType Default
  176.     Require user @SYSTEM
  177.     Order deny,allow
  178.   </Limit>
  179.  
  180.   # Only the owner or an administrator can cancel or authenticate a job...
  181.   <Limit Cancel-Job CUPS-Authenticate-Job>
  182.     AuthType Negotiate
  183.     Require user @OWNER @SYSTEM
  184.     Order deny,allow
  185.   </Limit>
  186.  
  187.   <Limit All>
  188.     Order deny,allow
  189.   </Limit>
  190. </Policy>
  191.  
captcha