[redhat-lspp] cups uds and lspp patches

[Russell Coker]

On Mon, 2006-03-20 at 11:08 -0500, Matt Anderson wrote:
> This is considered required under LSPP as well.  The original TCS patch
> implemented this functionality, but did so in a way which caused our
> evaluators to be nervous.  The plan now is to have a cups backend which
> takes the postscript output and the security label and generates a
> bitmap image with the file label overlayed on it.  These files can then
> be passed to a secondary trusted cups server which won't have to worry
> about malicious postscript overriding the file labels.

This sounds like a good solution to the labeling issue.  But what will
happen to the quality of the output?

If you print a bitmap of a reasonable resolution (IE not 100 megapixel)
then it will be expected to have lower print quality than sending
postscript files to the printer.  If you use really high bitmap
resolution then print time will increase and older printers will be
unable to print.