Novell LINUX ENTERPRISE DESKTOP 10 SP2 - DEPLOYMENT GUIDE 08-05-2008 Deployment Manual page 468

20.8.2 Changes in the CUPS Print Service
Generalized Functionality for BrowseAllow and
BrowseDeny
The access permissions set for BrowseAllow and BrowseDeny apply to all kinds
of packages sent to cupsd. The default settings in /etc/cups/cupsd.conf are
as follows:
BrowseAllow @LOCAL
BrowseDeny All
and
<Location />
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 127.0.0.2
Allow From @LOCAL
</Location>
In this way, only LOCAL hosts can access cupsd on a CUPS server. LOCAL hosts are
hosts whose IP addresses belong to a non-PPP interface (interfaces whose
IFF_POINTOPOINT flags are not set) and whose IP addresses belong to the same
network as the CUPS server. Packets from all other hosts are rejected immediately.
cupsd Activated by Default
In a standard installation, cupsd is activated automatically, enabling comfortable access
to the queues of CUPS network servers without any additional manual actions. The
items in
(page 452) are vital preconditions for this feature, because otherwise the security would
not be sufficient for an automatic activation of cupsd.
20.8.3 PPD Files in Various Packages
The YaST printer configuration sets up the queues for CUPS using only the PPD files
installed in /usr/share/cups/model. To find the suitable PPD files for the
printer model, YaST compares the vendor and model determined during hardware de-
452 Deployment Guide
Section "Generalized Functionality for BrowseAllow and BrowseDeny"