[cups.development] [RFE] STR #2476: Support for SELinux context based job banners

Matt Anderson mra at hp.com
Tue Aug 14 15:55:37 PDT 2007


DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

Utilizing the Classification setting, banner options were added mls, te,
and selinux.  This patch includes blank banner sheets for these banner
types, but they are place holders so that the stored job context can be
used to generate the appropriate label.

Choosing selinux would result in the entire SELinux context to be used
as the label: staff_u:sysadm_r:sysadm_lpr_t:SystemLow-SystemHigh

Using te would have a label of: sysadm_lpr_t

And mls would just be: SystemLow-SystemHigh

Also included in this patch is support for a boolean PerPageLabels which
defaults to yes.  When set to no the labels are left off the actual job
output, and only forced on the banner pages.

One concern that our evaluator had was that a significantly complex
SELinux context could extend beyond the width of the page.  For our
evaluation another patch for WriteLabelProlog() in filter/common.c
broke up long labels over multiple lines.  Since the 1.2 release used
in RHEL5 that filter code has changed, but it could be ported if there
is interest.

Link: http://www.cups.org/str.php?L2476
Version:  -feature
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: banner.patch
URL: <http://lists.cups.org/pipermail/cups-devel/attachments/20070814/4fb36e34/attachment.ksh>


More information about the cups-devel mailing list