remote management of shared network printer on Ubuntu server

[Marius Gedminas]

On Mon, Sep 12, 2005 at 11:43:48AM +0100, Paul Sladen wrote:
> > I had to edit the <Location /> [..] (Allow From 192.168.10.1/24 - my
> > whole local domain). [..] "Listen 192.168.10.1:631" statement
> 
> Ubuntu has a ''no open/listening ports'' policy by default, so we can't have
> cups listening on the other interfaces by default.  Perhaps there should be
> an easier way of enabling external cupsys access by clicking a box
> somewhere.

I saw a box like this somewhere...

  System -> Administration -> Printers
  Global Settings -> [x] Detect LAN Printers

It pops up a dialog saying

  Enabling LAN printers detection will open port 631 on your system.
  This exposes you to the risk of exploiting any security
  vulnerabilities of the printing system. Remote attackers could
  potentially gain access to your system with the privileges of the
  "cupsys" user.

(However when I say OK and check with netstat, I see that cupsys is only
listening on localhost:631.  This is on Hoary.)

Marius Gedminas
-- 
question = 0xFF;        // optimized Hamlet
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20050912/983c5d01/attachment.sig>