From a0c8b9c9556882f00c68b9727a95a1b6d1452913 Mon Sep 17 00:00:00 2001

From: Michael R Sweet <michael.r.sweet@gmail.com>

Date: Tue, 6 Dec 2022 09:04:01 -0500

Subject: [PATCH] Require authentication for CUPS-Get-Document.

---

 conf/cupsd.conf.in | 8 +++++++-

 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/conf/cupsd.conf.in b/conf/cupsd.conf.in

index b25884907..a07536f3e 100644

--- a/conf/cupsd.conf.in

+++ b/conf/cupsd.conf.in

@@ -68,7 +68,13 @@ IdleExitTimeout @EXIT_TIMEOUT@

     Order deny,allow

   </Limit>

-  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>

+  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job>

+    Require user @OWNER @SYSTEM

+    Order deny,allow

+  </Limit>

+

+  <Limit CUPS-Get-Document>

+    AuthType Default

     Require user @OWNER @SYSTEM

     Order deny,allow

   </Limit>

-- 

2.41.0