cups/cups-1.4-additional_policies.patch

27 lines
1.1 KiB
Diff

--- conf/cupsd.conf.in.orig 2010-01-27 11:49:09.000000000 +0100
+++ conf/cupsd.conf.in 2010-01-27 11:55:34.000000000 +0100
@@ -120,3 +120,23 @@ DefaultAuthType Basic
#
# End of "$Id: cupsd.conf.in 8805 2009-08-31 16:34:06Z mike $".
#
+
+# The policy below is added by openSUSE/Novell during build of our cups package.
+# The policy 'allowallforanybody' is totally open and insecure and therefore
+# it can only be used within an internal network where only trused users exist
+# and where the cupsd is not accessible at all from any external host.
+# Have in mind that any user who is allowed to do printer admin tasks
+# can change the print queues as he likes (e.g. send copies of confidental
+# print jobs from an internal network to any external destination).
+# For documentation regarding 'Managing Operation Policies' see
+# http://www.cups.org/documentation.php/doc-1.4/policies.html
+<Policy allowallforanybody>
+ <Limit All>
+ Order deny,allow
+ Allow from all
+ </Limit>
+</Policy>
+# Explicitely set the CUPS 'default' policy to be used by default:
+DefaultPolicy default
+# End of additions by openSUSE/Novell.
+