|
|
@@ -0,0 +1,116 @@
|
|
|
+LogLevel warn
|
|
|
+PageLogFormat "%p %u %j %T %P %C %{job-billing} %{job-originating-host-name} %{job-name} %{media} %{sides}"
|
|
|
+MaxLogSize 0
|
|
|
+Listen 6310
|
|
|
+Listen /run/cups/cups.sock
|
|
|
+Browsing Off
|
|
|
+DefaultAuthType Basic
|
|
|
+WebInterface Yes
|
|
|
+ServerAlias *
|
|
|
+<Location />
|
|
|
+ Order allow,deny
|
|
|
+ Allow all
|
|
|
+</Location>
|
|
|
+<Location /admin>
|
|
|
+ Satisfy all
|
|
|
+ AuthType Default
|
|
|
+ Require user @SYSTEM
|
|
|
+ Order allow,deny
|
|
|
+ Allow all
|
|
|
+</Location>
|
|
|
+<Policy default>
|
|
|
+ JobPrivateAccess default
|
|
|
+ JobPrivateValues default
|
|
|
+ SubscriptionPrivateAccess default
|
|
|
+ SubscriptionPrivateValues default
|
|
|
+ <Limit Create-Job Print-Job Print-URI Validate-Job>
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
|
|
|
+ Require user @OWNER @SYSTEM
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
|
|
|
+ AuthType Default
|
|
|
+ Require user @SYSTEM
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
|
|
|
+ AuthType Default
|
|
|
+ Require user @SYSTEM
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit Cancel-Job CUPS-Authenticate-Job>
|
|
|
+ Require user @OWNER @SYSTEM
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit All>
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+</Policy>
|
|
|
+<Policy authenticated>
|
|
|
+ JobPrivateAccess default
|
|
|
+ JobPrivateValues default
|
|
|
+ SubscriptionPrivateAccess default
|
|
|
+ SubscriptionPrivateValues default
|
|
|
+ <Limit Create-Job Print-Job Print-URI Validate-Job>
|
|
|
+ AuthType Default
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
|
|
|
+ AuthType Default
|
|
|
+ Require user @OWNER @SYSTEM
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
|
|
|
+ AuthType Default
|
|
|
+ Require user @SYSTEM
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
|
|
|
+ AuthType Default
|
|
|
+ Require user @SYSTEM
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit Cancel-Job CUPS-Authenticate-Job>
|
|
|
+ AuthType Default
|
|
|
+ Require user @OWNER @SYSTEM
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit All>
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+</Policy>
|
|
|
+<Policy kerberos>
|
|
|
+ JobPrivateAccess default
|
|
|
+ JobPrivateValues default
|
|
|
+ SubscriptionPrivateAccess default
|
|
|
+ SubscriptionPrivateValues default
|
|
|
+ <Limit Create-Job Print-Job Print-URI Validate-Job>
|
|
|
+ AuthType Negotiate
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
|
|
|
+ AuthType Negotiate
|
|
|
+ Require user @OWNER @SYSTEM
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
|
|
|
+ AuthType Default
|
|
|
+ Require user @SYSTEM
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
|
|
|
+ AuthType Default
|
|
|
+ Require user @SYSTEM
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit Cancel-Job CUPS-Authenticate-Job>
|
|
|
+ AuthType Negotiate
|
|
|
+ Require user @OWNER @SYSTEM
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+ <Limit All>
|
|
|
+ Order deny,allow
|
|
|
+ </Limit>
|
|
|
+</Policy>
|