daily pastebin goal
15%
SHARE
TWEET

cupsd.conf

timcowchip Feb 9th, 2017 119 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #
  2. # Configuration file for the CUPS scheduler.  See "man cupsd.conf" for a
  3. # complete description of this file.
  4. #
  5.  
  6. # Log general information in error_log - change "warn" to "debug"
  7. # for troubleshooting...
  8. LogLevel warn
  9. PageLogFormat
  10.  
  11. # Only listen for connections from the local machine.
  12. Listen localhost:631
  13. Listen 127.0.0.1:631
  14. Listen /var/run/cups/cups.sock
  15.  
  16. # Show shared printers on the local network.
  17. Browsing On
  18. BrowseLocalProtocols
  19.  
  20. # Default authentication type, when authentication is required...
  21. DefaultAuthType Basic
  22.  
  23. # Web interface setting...
  24. WebInterface Yes
  25.  
  26. # Restrict access to the server...
  27. <Location />
  28.   Order allow,deny
  29. </Location>
  30.  
  31. # Restrict access to the admin pages...
  32. <Location /admin>
  33.   Order allow,deny
  34. </Location>
  35.  
  36. # Restrict access to configuration files...
  37. <Location /admin/conf>
  38.   AuthType Default
  39.   Require user @SYSTEM
  40.   Order allow,deny
  41. </Location>
  42.  
  43. # Restrict access to log files...
  44. <Location /admin/log>
  45.   AuthType Default
  46.   Require user @SYSTEM
  47.   Order allow,deny
  48. </Location>
  49.  
  50. # Set the default printer/job policies...
  51. <Policy default>
  52.   # Job/subscription privacy...
  53.   JobPrivateAccess default
  54.   JobPrivateValues default
  55.   SubscriptionPrivateAccess default
  56.   SubscriptionPrivateValues default
  57.  
  58.   # Job-related operations must be done by the owner or an administrator...
  59.   <Limit Create-Job Print-Job Print-URI Validate-Job>
  60.     Order deny,allow
  61.   </Limit>
  62.  
  63.   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
  64.     Require user @OWNER @SYSTEM
  65.     Order deny,allow
  66.   </Limit>
  67.  
  68.   # All administration operations require an administrator to authenticate...
  69.   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
  70.     AuthType Default
  71.     Require user @SYSTEM
  72.     Order deny,allow
  73.   </Limit>
  74.  
  75.   # All printer operations require a printer operator to authenticate...
  76.   <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
  77.     AuthType Default
  78.     Require user @SYSTEM
  79.     Order deny,allow
  80.   </Limit>
  81.  
  82.   # Only the owner or an administrator can cancel or authenticate a job...
  83.   <Limit Cancel-Job CUPS-Authenticate-Job>
  84.     Require user @OWNER @SYSTEM
  85.     Order deny,allow
  86.   </Limit>
  87.  
  88.   <Limit All>
  89.     Order deny,allow
  90.   </Limit>
  91. </Policy>
  92.  
  93. # Set the authenticated printer/job policies...
  94. <Policy authenticated>
  95.   # Job/subscription privacy...
  96.   JobPrivateAccess default
  97.   JobPrivateValues default
  98.   SubscriptionPrivateAccess default
  99.   SubscriptionPrivateValues default
  100.  
  101.   # Job-related operations must be done by the owner or an administrator...
  102.   <Limit Create-Job Print-Job Print-URI Validate-Job>
  103.     AuthType Default
  104.     Order deny,allow
  105.   </Limit>
  106.  
  107.   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
  108.     AuthType Default
  109.     Require user @OWNER @SYSTEM
  110.     Order deny,allow
  111.   </Limit>
  112.  
  113.   # All administration operations require an administrator to authenticate...
  114.   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
  115.     AuthType Default
  116.     Require user @SYSTEM
  117.     Order deny,allow
  118.   </Limit>
  119.  
  120.   # All printer operations require a printer operator to authenticate...
  121.   <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
  122.     AuthType Default
  123.     Require user @SYSTEM
  124.     Order deny,allow
  125.   </Limit>
  126.  
  127.   # Only the owner or an administrator can cancel or authenticate a job...
  128.   <Limit Cancel-Job CUPS-Authenticate-Job>
  129.     AuthType Default
  130.     Require user @OWNER @SYSTEM
  131.     Order deny,allow
  132.   </Limit>
  133.  
  134.   <Limit All>
  135.     Order deny,allow
  136.   </Limit>
  137. </Policy>
  138.  
  139. # Set the kerberized printer/job policies...
  140. <Policy kerberos>
  141.   # Job/subscription privacy...
  142.   JobPrivateAccess default
  143.   JobPrivateValues default
  144.   SubscriptionPrivateAccess default
  145.   SubscriptionPrivateValues default
  146.  
  147.   # Job-related operations must be done by the owner or an administrator...
  148.   <Limit Create-Job Print-Job Print-URI Validate-Job>
  149.     AuthType Negotiate
  150.     Order deny,allow
  151.   </Limit>
  152.  
  153.   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
  154.     AuthType Negotiate
  155.     Require user @OWNER @SYSTEM
  156.     Order deny,allow
  157.   </Limit>
  158.  
  159.   # All administration operations require an administrator to authenticate...
  160.   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
  161.     AuthType Default
  162.     Require user @SYSTEM
  163.     Order deny,allow
  164.   </Limit>
  165.  
  166.   # All printer operations require a printer operator to authenticate...
  167.   <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
  168.     AuthType Default
  169.     Require user @SYSTEM
  170.     Order deny,allow
  171.   </Limit>
  172.  
  173.   # Only the owner or an administrator can cancel or authenticate a job...
  174.   <Limit Cancel-Job CUPS-Authenticate-Job>
  175.     AuthType Negotiate
  176.     Require user @OWNER @SYSTEM
  177.     Order deny,allow
  178.   </Limit>
  179.  
  180.   <Limit All>
  181.     Order deny,allow
  182.   </Limit>
  183. </Policy>
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top