Hamish Moffatt writes:
> 
> On Wed, Jun 17, 1998 at 08:14:00AM -0400, Paul Miller wrote:
> > How can I control who can print and who can't?
> 
> I am guessing, but I guess you could put everyone who may print
> in the lp group, and remove the setgid bit on /usr/bin/lpr* -- but
> then those users will be able to play with the files in /var/spool/lpd
> directly, which they normally cannot.
> 

Or, one could use the TCP wrapper methodology. Rename lpr, create a wrapper
and call it "lpr". Then have the wrapper check a "allowed user" file when a
print request comes in. It then either passes on the printing job to the real
lpr or rejects it with a diagnostic message (as a courtesy).

-- 
-= Sent by Debian 1.3 Linux =-
Thomas Kocourek  KD4CIK 
@[EMAIL PROTECTED]@westgac3.dragon.com Remove @_@ for correct Email address
--... ...-- ...  -.. .  -.- -.. ....- -.-. .. -.-


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to