Re: [redhat-lspp] Labeling CUPS printers / queues

[Klaus Weidner <klaus atsec com>]

On Fri, Jul 28, 2006 at 05:54:03PM -0400, Matt Anderson wrote:
> Eduardo Madeira Fleury wrote:
> > I haven't been able to figure out how to give MLS labels to printers / printer 
> > queues in CUPS; the problem is CUPS don't bind printers to /dev/ devices thus 
> > I don't know what should I label.
> > 
> > Does anybody have any clues?
> 
> For the evaluation we are only planning on supporting local printers.
> Networked printers have the problem that you are unable to ensure label
> integrity while the data is traveling over the network.

You should have a talk with Paul from HP, I think he has some code to do
exactly that ;-)

I think the limitation to support local printers only is reasonable to
reduce complexity, but I don't see a fundamental reason why multilevel
printing using CIPSO or IPSEC labeled networking shouldn't work (other
than the work of getting the parts to play nice together).

-Klaus