[cups.development] [RFE] STR #2476: Support for SELinux context based job banners
mra at hp.com
Tue Aug 14 15:55:37 PDT 2007
DO NOT REPLY TO THIS MESSAGE. INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.
Utilizing the Classification setting, banner options were added mls, te,
and selinux. This patch includes blank banner sheets for these banner
types, but they are place holders so that the stored job context can be
used to generate the appropriate label.
Choosing selinux would result in the entire SELinux context to be used
as the label: staff_u:sysadm_r:sysadm_lpr_t:SystemLow-SystemHigh
Using te would have a label of: sysadm_lpr_t
And mls would just be: SystemLow-SystemHigh
Also included in this patch is support for a boolean PerPageLabels which
defaults to yes. When set to no the labels are left off the actual job
output, and only forced on the banner pages.
One concern that our evaluator had was that a significantly complex
SELinux context could extend beyond the width of the page. For our
evaluation another patch for WriteLabelProlog() in filter/common.c
broke up long labels over multiple lines. Since the 1.2 release used
in RHEL5 that filter code has changed, but it could be ported if there
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
More information about the cups-devel