[prev in list] [next in list] [prev in thread] [next in thread] 

List:       opensolaris-security-discuss
Subject:    Re: [security-discuss] printing from a labeled zone to a printer
From:       Glenn Faden <glenn.faden () sun ! com>
Date:       2007-08-24 14:25:35
Message-ID: 15657854.1187990765037.JavaMail.Twebapp () oss-app1
[Download RAW message or body]

This isn't a recommended configuration, but it obviously works. We don't ship with \
515/tcp enabled as a multilevel port for shared interfaces because it has some \
peculiar side-effects. One issue is that the port becomes unavailable in your labeled \
zones, so you can't have both a global zone printer and a labeled zone printer.

Another issue is that the printmgr GUI gets annoying in a labeled zone if you try to \
configure access to a remote printer (in the global zone).Since the interface is \
shared, the printmgr doesn't believe you when you tell it that the printer is remote. \
A workaround is to use the lpadmin CLI.

While these issues are a bit confusing, they aren't security flaws, so you can safely \
use your printer configuration. The labeling will be correct.  
 
This message posted from opensolaris.org
_______________________________________________
security-discuss mailing list
security-discuss@opensolaris.org


[prev in list] [next in list] [prev in thread] [next in thread]