From dacfabd3fb6a434c04b05c9e569403a664f95b39 Mon Sep 17 00:00:00 2001
From: Jonathan Bauer
Date: Tue, 12 Jan 2016 15:02:58 +0100
Subject: [cups] added cupsd.conf to static data files
added conditional check for /etc/cups/printers.conf
---
remote/modules/cups/data/etc/cups/cupsd.conf | 143 +++++++++++++++++++++
.../cups/data/etc/systemd/system/cups.service | 1 +
2 files changed, 144 insertions(+)
create mode 100644 remote/modules/cups/data/etc/cups/cupsd.conf
(limited to 'remote/modules')
diff --git a/remote/modules/cups/data/etc/cups/cupsd.conf b/remote/modules/cups/data/etc/cups/cupsd.conf
new file mode 100644
index 00000000..bd3bc179
--- /dev/null
+++ b/remote/modules/cups/data/etc/cups/cupsd.conf
@@ -0,0 +1,143 @@
+#
+#
+# Sample configuration file for the CUPS scheduler. See "man cupsd.conf" for a
+# complete description of this file.
+#
+
+# Log general information in error_log - change "warn" to "debug"
+# for troubleshooting...
+LogLevel warn
+
+# Deactivate CUPS' internal logrotating, as we provide a better one, especially
+# LogLevel debug2 gets usable now
+MaxLogSize 0
+
+# Administrator user group...
+SystemGroup lpadmin
+
+
+# Only listen for connections from the local machine.
+Listen localhost:631
+Listen /var/run/cups/cups.sock
+
+# Show shared printers on the local network.
+Browsing Off
+BrowseOrder allow,deny
+BrowseAllow all
+BrowseLocalProtocols CUPS dnssd
+BrowseAddress @LOCAL
+
+# Default authentication type, when authentication is required...
+DefaultAuthType Basic
+
+# Web interface setting...
+WebInterface Yes
+
+# Restrict access to the server...
+
+ Order allow,deny
+
+
+# Restrict access to the admin pages...
+
+ Order allow,deny
+
+
+# Restrict access to configuration files...
+
+ AuthType Default
+ Require user @SYSTEM
+ Order allow,deny
+
+
+# Set the default printer/job policies...
+
+ # Job/subscription privacy...
+ JobPrivateAccess default
+ JobPrivateValues default
+ SubscriptionPrivateAccess default
+ SubscriptionPrivateValues default
+
+ # Job-related operations must be done by the owner or an administrator...
+
+ Order deny,allow
+
+
+
+ Require user @OWNER @SYSTEM
+ Order deny,allow
+
+
+ # All administration operations require an administrator to authenticate...
+
+ AuthType Default
+ Require user @SYSTEM
+ Order deny,allow
+
+
+ # All printer operations require a printer operator to authenticate...
+
+ AuthType Default
+ Require user @SYSTEM
+ Order deny,allow
+
+
+ # Only the owner or an administrator can cancel or authenticate a job...
+
+ Require user @OWNER @SYSTEM
+ Order deny,allow
+
+
+
+ Order deny,allow
+
+
+
+# Set the authenticated printer/job policies...
+
+ # Job/subscription privacy...
+ JobPrivateAccess default
+ JobPrivateValues default
+ SubscriptionPrivateAccess default
+ SubscriptionPrivateValues default
+
+ # Job-related operations must be done by the owner or an administrator...
+
+ AuthType Default
+ Order deny,allow
+
+
+
+ AuthType Default
+ Require user @OWNER @SYSTEM
+ Order deny,allow
+
+
+ # All administration operations require an administrator to authenticate...
+
+ AuthType Default
+ Require user @SYSTEM
+ Order deny,allow
+
+
+ # All printer operations require a printer operator to authenticate...
+
+ AuthType Default
+ Require user @SYSTEM
+ Order deny,allow
+
+
+ # Only the owner or an administrator can cancel or authenticate a job...
+
+ AuthType Default
+ Require user @OWNER @SYSTEM
+ Order deny,allow
+
+
+
+ Order deny,allow
+
+
+
+#
+#
diff --git a/remote/modules/cups/data/etc/systemd/system/cups.service b/remote/modules/cups/data/etc/systemd/system/cups.service
index 38beff56..1c1e6305 100644
--- a/remote/modules/cups/data/etc/systemd/system/cups.service
+++ b/remote/modules/cups/data/etc/systemd/system/cups.service
@@ -3,6 +3,7 @@ Description=Common Unix Printing System
Requires=network.target graphical.target
After=network.target
Before=graphical.target
+ConditionFileNotEmpty=/etc/cups/printers.conf
[Service]
ExecStart=/usr/sbin/cupsd -f
--
cgit v1.2.3-55-g7522