rpms / cups

Clone
Source Code
GIT

Blame cups-lspp.patch

2.0 c4 c5 c5-plus c6 c6-plus c7 c7-alt c8-beta enumdest f10 f11 f12 f13 f14 f15 f16 f17 f18 f19 f20 f21 f22 f23 f24 f25 f26 f27 f28 f29 f7 f8 f9 master
  1.   ee6b34413bac750292810265c5d4eeeaf92e5c12
  2.   cups-lspp.patch
Blob History Raw
Tim Waugh f4b662 
--- cups-1.2.8/Makedefs.in.lspp	2007-03-02 14:06:43.000000000 +0000
Tim Waugh f4b662 
+++ cups-1.2.8/Makedefs.in	2007-03-02 14:06:46.000000000 +0000
Tim Waugh f4b662 
@@ -136,7 +136,7 @@
Tim Waugh f4b662 
 			@LDFLAGS@ @RELROFLAG@ @PIEFLAGS@ $(OPTIM)
Tim Waugh f4b662 
 LINKCUPS	=	@LINKCUPS@ $(SSLLIBS)
Tim Waugh f4b662 
 LINKCUPSIMAGE	=	@LINKCUPSIMAGE@
Tim Waugh f4b662 
-LIBS		=	$(LINKCUPS) $(COMMONLIBS)
Tim Waugh f4b662 
+LIBS		=	$(LINKCUPS) $(COMMONLIBS) @LIBAUDIT@ @LIBSELINUX@
Tim Waugh f4b662 
 OPTIM		=	@OPTIM@
Tim Waugh f4b662 
 OPTIONS		=
Tim Waugh f4b662 
 PAMLIBS		=	@PAMLIBS@
Tim Waugh f4b662 
@@ -239,7 +239,7 @@
Tim Waugh f4b662 
 # Rules...
Tim Waugh f4b662 
 #
Tim Waugh f4b662
Tim Waugh f4b662 
-.SILENT:
Tim Waugh f4b662 
+
Tim Waugh f4b662 
 .SUFFIXES:	.1 .1.gz .1m .1m.gz .5 .5.gz .7 .7.gz .8 .8.gz .a .c .cxx .h .man .o .32.o .64.o .gz
Tim Waugh f4b662
Tim Waugh f4b662 
 .c.o:
Tim Waugh f4b662 
--- /dev/null	2007-03-02 08:56:41.811642143 +0000
Tim Waugh f4b662 
+++ cups-1.2.8/config-scripts/cups-lspp.m4	2007-03-02 14:06:43.000000000 +0000
Tim Waugh 9ad376 
@@ -0,0 +1,36 @@
Tim Waugh 9ad376 
+dnl
Tim Waugh 9ad376 
+dnl   LSPP code for the Common UNIX Printing System (CUPS).
Tim Waugh 9ad376 
+dnl
Tim Waugh 9ad376 
+dnl   Copyright 2005-2006 by Hewlett-Packard Development Company, L.P.
Tim Waugh 9ad376 
+dnl
Tim Waugh 9ad376 
+dnl   This program is free software; you can redistribute it and/or modify
Tim Waugh 9ad376 
+dnl   it under the terms of the GNU General Public License as published by
Tim Waugh 9ad376 
+dnl   the Free Software Foundation; version 2.
Tim Waugh 9ad376 
+dnl
Tim Waugh 9ad376 
+dnl   This program is distributed in the hope that it will be useful, but
Tim Waugh 9ad376 
+dnl   WITHOUT ANY WARRANTY; without even the implied warranty of
Tim Waugh 9ad376 
+dnl   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
Tim Waugh 9ad376 
+dnl   General Public License for more details.
Tim Waugh 9ad376 
+dnl
Tim Waugh 9ad376 
+dnl   You should have received a copy of the GNU General Public License
Tim Waugh 9ad376 
+dnl   along with this program; if not, write to the Free Software Foundation,
Tim Waugh 9ad376 
+dnl   Inc., 51 Franklin Street, Fifth Floor Boston, MA 02110-1301 USA
Tim Waugh 9ad376 
+dnl
Tim Waugh 9ad376 
+
Tim Waugh 9ad376 
+dnl Are we trying to meet LSPP requirements
Tim Waugh 9ad376 
+AC_ARG_ENABLE(lspp, [  --enable-lspp           turn on auditing and label support, default=no])
Tim Waugh 9ad376 
+
Tim Waugh 9ad376 
+if test x"$enable_lspp" != xno; then
Tim Waugh 9ad376 
+    case "$uname" in
Tim Waugh 9ad376 
+        Linux)
Tim Waugh 9ad376 
+            AC_CHECK_LIB(audit,audit_log_user_message, [LIBAUDIT="-laudit" AC_SUBST(LIBAUDIT)])
Tim Waugh 9ad376 
+            AC_CHECK_HEADER(libaudit.h)
Tim Waugh 9ad376 
+            AC_CHECK_LIB(selinux,getpeercon, [LIBSELINUX="-lselinux" AC_SUBST(LIBSELINUX)])
Tim Waugh 9ad376 
+            AC_CHECK_HEADER(selinux/selinux.h)
Tim Waugh 9ad376 
+            AC_DEFINE(WITH_LSPP)
Tim Waugh 9ad376 
+            ;;
Tim Waugh 9ad376 
+        *)
Tim Waugh 9ad376 
+            # All others
Tim Waugh 9ad376 
+            ;;
Tim Waugh 9ad376 
+    esac
Tim Waugh 9ad376 
+fi
Tim Waugh ee6b34 
--- cups-1.2.8/data/mls	2007-03-02 14:06:43.000000000 +0000
Tim Waugh ee6b34 
+++ cups-1.2.4-secheck/data/mls	2007-03-07 10:33:09.000000000 -0500
Tim Waugh ee6b34 
@@ -0,0 +1,261 @@
Tim Waugh 75d0e8 
+%!PS-Adobe-3.0
Tim Waugh 75d0e8 
+%%BoundingBox: 0 0 612 792
Tim Waugh 75d0e8 
+%%Pages: 1
Tim Waugh 75d0e8 
+%%LanguageLevel: 1
Tim Waugh 75d0e8 
+%%DocumentData: Clean7Bit
Tim Waugh 75d0e8 
+%%DocumentSuppliedResources: procset bannerprint/1.0
Tim Waugh 75d0e8 
+%%DocumentNeededResources: font Helvetica Helvetica-Bold Times-Roman
Tim Waugh 75d0e8 
+%%Creator: Michael Sweet, Easy Software Products
Tim Waugh 75d0e8 
+%%CreationDate: May 10, 2000
Tim Waugh 75d0e8 
+%%Title: Test Page
Tim Waugh 75d0e8 
+%%EndComments
Tim Waugh 75d0e8 
+%%BeginProlog
Tim Waugh 75d0e8 
+%%BeginResource procset bannerprint 1.1 0
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%   PostScript banner page for the Common UNIX Printing System ("CUPS").
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%   Copyright 1993-2005 by Easy Software Products
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%   These coded instructions, statements, and computer programs are the
Tim Waugh 75d0e8 
+%   property of Easy Software Products and are protected by Federal
Tim Waugh 75d0e8 
+%   copyright law.  Distribution and use rights are outlined in the file
Tim Waugh 75d0e8 
+%   "LICENSE.txt" which should have been included with this file.  If this
Tim Waugh 75d0e8 
+%   file is missing or damaged please contact Easy Software Products
Tim Waugh 75d0e8 
+%   at:
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%       Attn: CUPS Licensing Information
Tim Waugh 75d0e8 
+%       Easy Software Products
Tim Waugh 75d0e8 
+%       44141 Airport View Drive, Suite 204
Tim Waugh 75d0e8 
+%       Hollywood, Maryland 20636 USA
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%       Voice: (301) 373-9600
Tim Waugh 75d0e8 
+%       EMail: cups-info@cups.org
Tim Waugh 75d0e8 
+%         WWW: http://www.cups.org
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+/CENTER {			% Draw centered text
Tim Waugh 75d0e8 
+				% (name) CENTER -
Tim Waugh 75d0e8 
+  dup stringwidth pop		% Get the width of the string
Tim Waugh 75d0e8 
+  0.5 mul neg 0 rmoveto		% Shift left 1/2 of the distance
Tim Waugh 75d0e8 
+  show				% Show the string
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+/RIGHT {			% Draw right-justified text
Tim Waugh 75d0e8 
+				% (name) RIGHT -
Tim Waugh 75d0e8 
+  dup stringwidth pop		% Get the width of the string
Tim Waugh 75d0e8 
+  neg 0 rmoveto			% Shift left the entire distance
Tim Waugh 75d0e8 
+  show				% Show the string
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+/NUMBER {			% Draw a number
Tim Waugh 75d0e8 
+				% power n NUMBER -
Tim Waugh 75d0e8 
+  1 index 1 eq {		% power == 1?
Tim Waugh 75d0e8 
+    round cvi exch pop		% Convert "n" to integer
Tim Waugh 75d0e8 
+  } {
Tim Waugh 75d0e8 
+    1 index mul round exch div	% Truncate extra decimal places
Tim Waugh 75d0e8 
+  } ifelse
Tim Waugh 75d0e8 
+  100 string cvs show		% Convert to a string and show it...
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+/CUPSLOGO {			% Draw the CUPS logo
Tim Waugh 75d0e8 
+				% height CUPSLOGO
Tim Waugh 75d0e8 
+  % Start with a big C...
Tim Waugh 75d0e8 
+  /Helvetica findfont 1 index scalefont setfont
Tim Waugh 75d0e8 
+  0 setgray
Tim Waugh 75d0e8 
+  0 0 moveto
Tim Waugh 75d0e8 
+  (C) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Then "UNIX Printing System" much smaller...
Tim Waugh 75d0e8 
+  /Helvetica-Bold findfont 1 index 9 div scalefont setfont
Tim Waugh 75d0e8 
+  0.25 mul
Tim Waugh 75d0e8 
+  dup dup 2.0 mul moveto
Tim Waugh 75d0e8 
+  (UNIX) show
Tim Waugh 75d0e8 
+  dup dup 1.6 mul moveto
Tim Waugh 75d0e8 
+  (Printing) show
Tim Waugh 75d0e8 
+  dup 1.2 mul moveto
Tim Waugh 75d0e8 
+  (System) show
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+/ESPLOGO {			% Draw the ESP logo
Tim Waugh 75d0e8 
+				% height ESPLOGO
Tim Waugh 75d0e8 
+  % Compute the size of the logo...
Tim Waugh 75d0e8 
+  0 0
Tim Waugh 75d0e8 
+  2 index 1.5 mul 3 index
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Do the "metallic" fill from 10% black to 40% black...
Tim Waugh 75d0e8 
+  1 -0.001 0 {
Tim Waugh 75d0e8 
+    dup			% loopval
Tim Waugh 75d0e8 
+    -0.15 mul		% loopval * -0.15
Tim Waugh 75d0e8 
+    0.9 add		% 0.9 - loopval * 0.15
Tim Waugh 75d0e8 
+    setgray		% set gray shade
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    0			% x
Tim Waugh 75d0e8 
+    1 index neg		% loopval
Tim Waugh 75d0e8 
+    1 add		% 1 - loopval
Tim Waugh 75d0e8 
+    3 index		% height
Tim Waugh 75d0e8 
+    mul			% height * (1 - loopval)
Tim Waugh 75d0e8 
+    moveto		% starting point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    dup			% loopval
Tim Waugh 75d0e8 
+    3 index		% width
Tim Waugh 75d0e8 
+    mul			% loopval * width
Tim Waugh 75d0e8 
+    2 index		% height
Tim Waugh 75d0e8 
+    lineto		% Next point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    0			% x
Tim Waugh 75d0e8 
+    2 index		% height
Tim Waugh 75d0e8 
+    lineto		% Next point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    closepath
Tim Waugh 75d0e8 
+    fill
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    dup			% loopval
Tim Waugh 75d0e8 
+    0.15 mul		% loopval * 0.15
Tim Waugh 75d0e8 
+    0.6 add		% 0.6 + loopval * 0.15
Tim Waugh 75d0e8 
+    setgray
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    dup			% loopval
Tim Waugh 75d0e8 
+    neg 1 add		% 1 - loopval
Tim Waugh 75d0e8 
+    3 index		% width
Tim Waugh 75d0e8 
+    mul			% (1 - loopval) * width
Tim Waugh 75d0e8 
+    0			% y
Tim Waugh 75d0e8 
+    moveto		% Starting point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    2 index		% width
Tim Waugh 75d0e8 
+    exch		% loopval
Tim Waugh 75d0e8 
+    2 index		% height
Tim Waugh 75d0e8 
+    mul			% loopval * height
Tim Waugh 75d0e8 
+    lineto		% Next point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    1 index		% width
Tim Waugh 75d0e8 
+    0			% y
Tim Waugh 75d0e8 
+    lineto		% Next point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    closepath
Tim Waugh 75d0e8 
+    fill
Tim Waugh 75d0e8 
+  } for
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  0 setgray rectstroke
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /Helvetica-BoldOblique findfont 1 index 3 div scalefont setfont
Tim Waugh 75d0e8 
+  dup 40 div
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  dup 4 mul 1 index 25 mul moveto (E) show
Tim Waugh 75d0e8 
+  dup 10 mul 1 index 15 mul moveto (S) show
Tim Waugh 75d0e8 
+  dup 16 mul 1 index 5 mul moveto (P) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /Helvetica-BoldOblique findfont 2 index 5 div scalefont setfont
Tim Waugh 75d0e8 
+  dup 14 mul 1 index 29 mul moveto (asy) show
Tim Waugh 75d0e8 
+  dup 20 mul 1 index 19 mul moveto (oftware) show
Tim Waugh 75d0e8 
+  dup 26 mul 1 index 9 mul moveto (roducts) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pop
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+%%EndResource
Tim Waugh 75d0e8 
+%%EndProlog
Tim Waugh 75d0e8 
+%%Page: 1 1
Tim Waugh 75d0e8 
+gsave
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Determine the imageable area and device resolution...
Tim Waugh 75d0e8 
+  initclip newpath clippath pathbbox	% Get bounding rectangle
Tim Waugh 75d0e8 
+  72 div /pageTop exch def		% Get top margin in inches
Tim Waugh 75d0e8 
+  72 div /pageRight exch def		% Get right margin in inches
Tim Waugh 75d0e8 
+  72 div /pageBottom exch def		% Get bottom margin in inches
Tim Waugh 75d0e8 
+  72 div /pageLeft exch def		% Get left margin in inches
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /pageWidth pageRight pageLeft sub def	% pageWidth = pageRight - pageLeft
Tim Waugh 75d0e8 
+  /pageHeight pageTop pageBottom sub def% pageHeight = pageTop - pageBottom
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /boxWidth				% width of text box
Tim Waugh 75d0e8 
+  pageWidth pageHeight lt
Tim Waugh 75d0e8 
+  { pageWidth 54 mul }
Tim Waugh 75d0e8 
+  { pageHeight 42 mul }
Tim Waugh 75d0e8 
+  ifelse def
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  newpath				% Clear bounding path
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Create fonts...
Tim Waugh 75d0e8 
+  /bigFont /Helvetica-Bold findfont	% bigFont = Helvetica-Bold
Tim Waugh 75d0e8 
+  pageHeight 3 mul scalefont def	% size = pageHeight * 3 (nominally 33)
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /mediumFont /Helvetica findfont	% mediumFont = Helvetica
Tim Waugh 75d0e8 
+  pageHeight 1.5 mul scalefont def	% size = pageHeight * 1.5 (nominally 16.5)
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Offset page to account for lower-left margin...
Tim Waugh 75d0e8 
+  pageLeft 72 mul
Tim Waugh 75d0e8 
+  pageBottom 72 mul
Tim Waugh 75d0e8 
+  translate
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Job information box...
Tim Waugh 75d0e8 
+  pageWidth 36 mul 9 add		% x = pageWidth * 1/2 * 72 + 9
Tim Waugh 75d0e8 
+  boxWidth 0.5 mul sub			% x-= 1/2 box width
Tim Waugh 75d0e8 
+  pageHeight 30 mul 9 sub		% y = pageHeight * 1/2 * 72 - 9
Tim Waugh 75d0e8 
+  boxWidth				% w = box width
Tim Waugh 75d0e8 
+  pageHeight 14 mul			% h = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  0.5 setgray rectfill			% Draw a shadow
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  boxWidth 0.5 mul sub			% x-= 1/2 box width
Tim Waugh 75d0e8 
+  pageHeight 30 mul			% y = pageHeight * 1/4 * 72
Tim Waugh 75d0e8 
+  boxWidth				% w = box width
Tim Waugh 75d0e8 
+  pageHeight 14 mul			% h = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  4 copy 1 setgray rectfill		% Clear the box to white
Tim Waugh 75d0e8 
+  0 setgray rectstroke			% Draw a black box around it...
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Job information text...
Tim Waugh 75d0e8 
+  mediumFont setfont			% Medium sized font
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 36 mul			% y = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 5 mul add			% y += 2 lines
Tim Waugh 75d0e8 
+  2 copy				% Copy X & Y
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  (Job ID: ) RIGHT
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  ({printer-name}-{job-id}) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 36 mul			% y = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 2 mul add			% y += 1 line
Tim Waugh 75d0e8 
+  2 copy				% Copy X & Y
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  (Title: ) RIGHT
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  ({job-name}) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 36 mul			% y = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight -1 mul add			% y -= 1 line
Tim Waugh 75d0e8 
+  2 copy				% Copy X & Y
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  (Requesting User: ) RIGHT
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  ({job-originating-user-name}) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 36 mul			% y = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight -4 mul add			% y -= 2 lines
Tim Waugh 75d0e8 
+  2 copy				% Copy X & Y
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  (Billing Info: ) RIGHT
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  ({?job-billing}) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Then the CUPS logo....
Tim Waugh 75d0e8 
+  gsave
Tim Waugh 75d0e8 
+    pageWidth 4 mul
Tim Waugh 75d0e8 
+    pageWidth 6 mul
Tim Waugh 75d0e8 
+    translate
Tim Waugh 75d0e8 
+    pageWidth 9 mul CUPSLOGO
Tim Waugh 75d0e8 
+  grestore
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % And the ESP logo....
Tim Waugh 75d0e8 
+  gsave
Tim Waugh 75d0e8 
+    pageWidth 59 mul
Tim Waugh 75d0e8 
+    pageWidth 6 mul
Tim Waugh 75d0e8 
+    translate
Tim Waugh 75d0e8 
+    pageWidth 6 mul ESPLOGO
Tim Waugh 75d0e8 
+  grestore
Tim Waugh 75d0e8 
+% Show the page...
Tim Waugh 75d0e8 
+grestore
Tim Waugh 75d0e8 
+showpage
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+% End of "$Id: mls_template,v 1.1 2005/06/27 18:44:46 colmo Exp $".
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%%EOF
Tim Waugh ee6b34 
--- cups-1.2.8/data/selinux	2007-03-02 14:06:43.000000000 +0000
Tim Waugh ee6b34 
+++ cups-1.2.4-secheck/data/selinux	2007-03-07 10:33:09.000000000 -0500
Tim Waugh ee6b34 
@@ -0,0 +1,261 @@
Tim Waugh 75d0e8 
+%!PS-Adobe-3.0
Tim Waugh 75d0e8 
+%%BoundingBox: 0 0 612 792
Tim Waugh 75d0e8 
+%%Pages: 1
Tim Waugh 75d0e8 
+%%LanguageLevel: 1
Tim Waugh 75d0e8 
+%%DocumentData: Clean7Bit
Tim Waugh 75d0e8 
+%%DocumentSuppliedResources: procset bannerprint/1.0
Tim Waugh 75d0e8 
+%%DocumentNeededResources: font Helvetica Helvetica-Bold Times-Roman
Tim Waugh 75d0e8 
+%%Creator: Michael Sweet, Easy Software Products
Tim Waugh 75d0e8 
+%%CreationDate: May 10, 2000
Tim Waugh 75d0e8 
+%%Title: Test Page
Tim Waugh 75d0e8 
+%%EndComments
Tim Waugh 75d0e8 
+%%BeginProlog
Tim Waugh 75d0e8 
+%%BeginResource procset bannerprint 1.1 0
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%   PostScript banner page for the Common UNIX Printing System ("CUPS").
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%   Copyright 1993-2005 by Easy Software Products
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%   These coded instructions, statements, and computer programs are the
Tim Waugh 75d0e8 
+%   property of Easy Software Products and are protected by Federal
Tim Waugh 75d0e8 
+%   copyright law.  Distribution and use rights are outlined in the file
Tim Waugh 75d0e8 
+%   "LICENSE.txt" which should have been included with this file.  If this
Tim Waugh 75d0e8 
+%   file is missing or damaged please contact Easy Software Products
Tim Waugh 75d0e8 
+%   at:
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%       Attn: CUPS Licensing Information
Tim Waugh 75d0e8 
+%       Easy Software Products
Tim Waugh 75d0e8 
+%       44141 Airport View Drive, Suite 204
Tim Waugh 75d0e8 
+%       Hollywood, Maryland 20636 USA
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%       Voice: (301) 373-9600
Tim Waugh 75d0e8 
+%       EMail: cups-info@cups.org
Tim Waugh 75d0e8 
+%         WWW: http://www.cups.org
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+/CENTER {			% Draw centered text
Tim Waugh 75d0e8 
+				% (name) CENTER -
Tim Waugh 75d0e8 
+  dup stringwidth pop		% Get the width of the string
Tim Waugh 75d0e8 
+  0.5 mul neg 0 rmoveto		% Shift left 1/2 of the distance
Tim Waugh 75d0e8 
+  show				% Show the string
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+/RIGHT {			% Draw right-justified text
Tim Waugh 75d0e8 
+				% (name) RIGHT -
Tim Waugh 75d0e8 
+  dup stringwidth pop		% Get the width of the string
Tim Waugh 75d0e8 
+  neg 0 rmoveto			% Shift left the entire distance
Tim Waugh 75d0e8 
+  show				% Show the string
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+/NUMBER {			% Draw a number
Tim Waugh 75d0e8 
+				% power n NUMBER -
Tim Waugh 75d0e8 
+  1 index 1 eq {		% power == 1?
Tim Waugh 75d0e8 
+    round cvi exch pop		% Convert "n" to integer
Tim Waugh 75d0e8 
+  } {
Tim Waugh 75d0e8 
+    1 index mul round exch div	% Truncate extra decimal places
Tim Waugh 75d0e8 
+  } ifelse
Tim Waugh 75d0e8 
+  100 string cvs show		% Convert to a string and show it...
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+/CUPSLOGO {			% Draw the CUPS logo
Tim Waugh 75d0e8 
+				% height CUPSLOGO
Tim Waugh 75d0e8 
+  % Start with a big C...
Tim Waugh 75d0e8 
+  /Helvetica findfont 1 index scalefont setfont
Tim Waugh 75d0e8 
+  0 setgray
Tim Waugh 75d0e8 
+  0 0 moveto
Tim Waugh 75d0e8 
+  (C) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Then "UNIX Printing System" much smaller...
Tim Waugh 75d0e8 
+  /Helvetica-Bold findfont 1 index 9 div scalefont setfont
Tim Waugh 75d0e8 
+  0.25 mul
Tim Waugh 75d0e8 
+  dup dup 2.0 mul moveto
Tim Waugh 75d0e8 
+  (UNIX) show
Tim Waugh 75d0e8 
+  dup dup 1.6 mul moveto
Tim Waugh 75d0e8 
+  (Printing) show
Tim Waugh 75d0e8 
+  dup 1.2 mul moveto
Tim Waugh 75d0e8 
+  (System) show
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+/ESPLOGO {			% Draw the ESP logo
Tim Waugh 75d0e8 
+				% height ESPLOGO
Tim Waugh 75d0e8 
+  % Compute the size of the logo...
Tim Waugh 75d0e8 
+  0 0
Tim Waugh 75d0e8 
+  2 index 1.5 mul 3 index
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Do the "metallic" fill from 10% black to 40% black...
Tim Waugh 75d0e8 
+  1 -0.001 0 {
Tim Waugh 75d0e8 
+    dup			% loopval
Tim Waugh 75d0e8 
+    -0.15 mul		% loopval * -0.15
Tim Waugh 75d0e8 
+    0.9 add		% 0.9 - loopval * 0.15
Tim Waugh 75d0e8 
+    setgray		% set gray shade
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    0			% x
Tim Waugh 75d0e8 
+    1 index neg		% loopval
Tim Waugh 75d0e8 
+    1 add		% 1 - loopval
Tim Waugh 75d0e8 
+    3 index		% height
Tim Waugh 75d0e8 
+    mul			% height * (1 - loopval)
Tim Waugh 75d0e8 
+    moveto		% starting point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    dup			% loopval
Tim Waugh 75d0e8 
+    3 index		% width
Tim Waugh 75d0e8 
+    mul			% loopval * width
Tim Waugh 75d0e8 
+    2 index		% height
Tim Waugh 75d0e8 
+    lineto		% Next point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    0			% x
Tim Waugh 75d0e8 
+    2 index		% height
Tim Waugh 75d0e8 
+    lineto		% Next point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    closepath
Tim Waugh 75d0e8 
+    fill
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    dup			% loopval
Tim Waugh 75d0e8 
+    0.15 mul		% loopval * 0.15
Tim Waugh 75d0e8 
+    0.6 add		% 0.6 + loopval * 0.15
Tim Waugh 75d0e8 
+    setgray
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    dup			% loopval
Tim Waugh 75d0e8 
+    neg 1 add		% 1 - loopval
Tim Waugh 75d0e8 
+    3 index		% width
Tim Waugh 75d0e8 
+    mul			% (1 - loopval) * width
Tim Waugh 75d0e8 
+    0			% y
Tim Waugh 75d0e8 
+    moveto		% Starting point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    2 index		% width
Tim Waugh 75d0e8 
+    exch		% loopval
Tim Waugh 75d0e8 
+    2 index		% height
Tim Waugh 75d0e8 
+    mul			% loopval * height
Tim Waugh 75d0e8 
+    lineto		% Next point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    1 index		% width
Tim Waugh 75d0e8 
+    0			% y
Tim Waugh 75d0e8 
+    lineto		% Next point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    closepath
Tim Waugh 75d0e8 
+    fill
Tim Waugh 75d0e8 
+  } for
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  0 setgray rectstroke
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /Helvetica-BoldOblique findfont 1 index 3 div scalefont setfont
Tim Waugh 75d0e8 
+  dup 40 div
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  dup 4 mul 1 index 25 mul moveto (E) show
Tim Waugh 75d0e8 
+  dup 10 mul 1 index 15 mul moveto (S) show
Tim Waugh 75d0e8 
+  dup 16 mul 1 index 5 mul moveto (P) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /Helvetica-BoldOblique findfont 2 index 5 div scalefont setfont
Tim Waugh 75d0e8 
+  dup 14 mul 1 index 29 mul moveto (asy) show
Tim Waugh 75d0e8 
+  dup 20 mul 1 index 19 mul moveto (oftware) show
Tim Waugh 75d0e8 
+  dup 26 mul 1 index 9 mul moveto (roducts) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pop
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+%%EndResource
Tim Waugh 75d0e8 
+%%EndProlog
Tim Waugh 75d0e8 
+%%Page: 1 1
Tim Waugh 75d0e8 
+gsave
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Determine the imageable area and device resolution...
Tim Waugh 75d0e8 
+  initclip newpath clippath pathbbox	% Get bounding rectangle
Tim Waugh 75d0e8 
+  72 div /pageTop exch def		% Get top margin in inches
Tim Waugh 75d0e8 
+  72 div /pageRight exch def		% Get right margin in inches
Tim Waugh 75d0e8 
+  72 div /pageBottom exch def		% Get bottom margin in inches
Tim Waugh 75d0e8 
+  72 div /pageLeft exch def		% Get left margin in inches
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /pageWidth pageRight pageLeft sub def	% pageWidth = pageRight - pageLeft
Tim Waugh 75d0e8 
+  /pageHeight pageTop pageBottom sub def% pageHeight = pageTop - pageBottom
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /boxWidth				% width of text box
Tim Waugh 75d0e8 
+  pageWidth pageHeight lt
Tim Waugh 75d0e8 
+  { pageWidth 54 mul }
Tim Waugh 75d0e8 
+  { pageHeight 42 mul }
Tim Waugh 75d0e8 
+  ifelse def
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  newpath				% Clear bounding path
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Create fonts...
Tim Waugh 75d0e8 
+  /bigFont /Helvetica-Bold findfont	% bigFont = Helvetica-Bold
Tim Waugh 75d0e8 
+  pageHeight 3 mul scalefont def	% size = pageHeight * 3 (nominally 33)
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /mediumFont /Helvetica findfont	% mediumFont = Helvetica
Tim Waugh 75d0e8 
+  pageHeight 1.5 mul scalefont def	% size = pageHeight * 1.5 (nominally 16.5)
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Offset page to account for lower-left margin...
Tim Waugh 75d0e8 
+  pageLeft 72 mul
Tim Waugh 75d0e8 
+  pageBottom 72 mul
Tim Waugh 75d0e8 
+  translate
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Job information box...
Tim Waugh 75d0e8 
+  pageWidth 36 mul 9 add		% x = pageWidth * 1/2 * 72 + 9
Tim Waugh 75d0e8 
+  boxWidth 0.5 mul sub			% x-= 1/2 box width
Tim Waugh 75d0e8 
+  pageHeight 30 mul 9 sub		% y = pageHeight * 1/2 * 72 - 9
Tim Waugh 75d0e8 
+  boxWidth				% w = box width
Tim Waugh 75d0e8 
+  pageHeight 14 mul			% h = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  0.5 setgray rectfill			% Draw a shadow
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  boxWidth 0.5 mul sub			% x-= 1/2 box width
Tim Waugh 75d0e8 
+  pageHeight 30 mul			% y = pageHeight * 1/4 * 72
Tim Waugh 75d0e8 
+  boxWidth				% w = box width
Tim Waugh 75d0e8 
+  pageHeight 14 mul			% h = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  4 copy 1 setgray rectfill		% Clear the box to white
Tim Waugh 75d0e8 
+  0 setgray rectstroke			% Draw a black box around it...
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Job information text...
Tim Waugh 75d0e8 
+  mediumFont setfont			% Medium sized font
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 36 mul			% y = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 5 mul add			% y += 2 lines
Tim Waugh 75d0e8 
+  2 copy				% Copy X & Y
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  (Job ID: ) RIGHT
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  ({printer-name}-{job-id}) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 36 mul			% y = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 2 mul add			% y += 1 line
Tim Waugh 75d0e8 
+  2 copy				% Copy X & Y
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  (Title: ) RIGHT
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  ({job-name}) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 36 mul			% y = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight -1 mul add			% y -= 1 line
Tim Waugh 75d0e8 
+  2 copy				% Copy X & Y
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  (Requesting User: ) RIGHT
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  ({job-originating-user-name}) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 36 mul			% y = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight -4 mul add			% y -= 2 lines
Tim Waugh 75d0e8 
+  2 copy				% Copy X & Y
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  (Billing Info: ) RIGHT
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  ({?job-billing}) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Then the CUPS logo....
Tim Waugh 75d0e8 
+  gsave
Tim Waugh 75d0e8 
+    pageWidth 4 mul
Tim Waugh 75d0e8 
+    pageWidth 6 mul
Tim Waugh 75d0e8 
+    translate
Tim Waugh 75d0e8 
+    pageWidth 9 mul CUPSLOGO
Tim Waugh 75d0e8 
+  grestore
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % And the ESP logo....
Tim Waugh 75d0e8 
+  gsave
Tim Waugh 75d0e8 
+    pageWidth 59 mul
Tim Waugh 75d0e8 
+    pageWidth 6 mul
Tim Waugh 75d0e8 
+    translate
Tim Waugh 75d0e8 
+    pageWidth 6 mul ESPLOGO
Tim Waugh 75d0e8 
+  grestore
Tim Waugh 75d0e8 
+% Show the page...
Tim Waugh 75d0e8 
+grestore
Tim Waugh 75d0e8 
+showpage
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+% End of "$Id: mls_template,v 1.1 2005/06/27 18:44:46 colmo Exp $".
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%%EOF
Tim Waugh f4b662 
--- cups-1.2.8/data/Makefile.lspp	2006-03-19 03:23:34.000000000 +0000
Tim Waugh f4b662 
+++ cups-1.2.8/data/Makefile	2007-03-02 14:06:43.000000000 +0000
Tim Waugh f4b662 
@@ -34,7 +34,10 @@
Tim Waugh f4b662 
 		secret \
Tim Waugh f4b662 
 		standard \
Tim Waugh f4b662 
 		topsecret \
Tim Waugh f4b662 
-		unclassified
Tim Waugh f4b662 
+		unclassified \
Tim Waugh f4b662 
+		selinux \
Tim Waugh f4b662 
+		mls \
Tim Waugh f4b662 
+		te
Tim Waugh f4b662
Tim Waugh f4b662 
 CHARMAPS =	\
Tim Waugh f4b662 
 		euc-cn.txt \
Tim Waugh ee6b34 
--- cups-1.2.8/data/te	2007-03-02 14:06:43.000000000 +0000
Tim Waugh ee6b34 
+++ cups-1.2.4-secheck/data/te	2007-03-07 10:33:09.000000000 -0500
Tim Waugh ee6b34 
@@ -0,0 +1,261 @@
Tim Waugh 75d0e8 
+%!PS-Adobe-3.0
Tim Waugh 75d0e8 
+%%BoundingBox: 0 0 612 792
Tim Waugh 75d0e8 
+%%Pages: 1
Tim Waugh 75d0e8 
+%%LanguageLevel: 1
Tim Waugh 75d0e8 
+%%DocumentData: Clean7Bit
Tim Waugh 75d0e8 
+%%DocumentSuppliedResources: procset bannerprint/1.0
Tim Waugh 75d0e8 
+%%DocumentNeededResources: font Helvetica Helvetica-Bold Times-Roman
Tim Waugh 75d0e8 
+%%Creator: Michael Sweet, Easy Software Products
Tim Waugh 75d0e8 
+%%CreationDate: May 10, 2000
Tim Waugh 75d0e8 
+%%Title: Test Page
Tim Waugh 75d0e8 
+%%EndComments
Tim Waugh 75d0e8 
+%%BeginProlog
Tim Waugh 75d0e8 
+%%BeginResource procset bannerprint 1.1 0
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%   PostScript banner page for the Common UNIX Printing System ("CUPS").
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%   Copyright 1993-2005 by Easy Software Products
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%   These coded instructions, statements, and computer programs are the
Tim Waugh 75d0e8 
+%   property of Easy Software Products and are protected by Federal
Tim Waugh 75d0e8 
+%   copyright law.  Distribution and use rights are outlined in the file
Tim Waugh 75d0e8 
+%   "LICENSE.txt" which should have been included with this file.  If this
Tim Waugh 75d0e8 
+%   file is missing or damaged please contact Easy Software Products
Tim Waugh 75d0e8 
+%   at:
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%       Attn: CUPS Licensing Information
Tim Waugh 75d0e8 
+%       Easy Software Products
Tim Waugh 75d0e8 
+%       44141 Airport View Drive, Suite 204
Tim Waugh 75d0e8 
+%       Hollywood, Maryland 20636 USA
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%       Voice: (301) 373-9600
Tim Waugh 75d0e8 
+%       EMail: cups-info@cups.org
Tim Waugh 75d0e8 
+%         WWW: http://www.cups.org
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+/CENTER {			% Draw centered text
Tim Waugh 75d0e8 
+				% (name) CENTER -
Tim Waugh 75d0e8 
+  dup stringwidth pop		% Get the width of the string
Tim Waugh 75d0e8 
+  0.5 mul neg 0 rmoveto		% Shift left 1/2 of the distance
Tim Waugh 75d0e8 
+  show				% Show the string
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+/RIGHT {			% Draw right-justified text
Tim Waugh 75d0e8 
+				% (name) RIGHT -
Tim Waugh 75d0e8 
+  dup stringwidth pop		% Get the width of the string
Tim Waugh 75d0e8 
+  neg 0 rmoveto			% Shift left the entire distance
Tim Waugh 75d0e8 
+  show				% Show the string
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+/NUMBER {			% Draw a number
Tim Waugh 75d0e8 
+				% power n NUMBER -
Tim Waugh 75d0e8 
+  1 index 1 eq {		% power == 1?
Tim Waugh 75d0e8 
+    round cvi exch pop		% Convert "n" to integer
Tim Waugh 75d0e8 
+  } {
Tim Waugh 75d0e8 
+    1 index mul round exch div	% Truncate extra decimal places
Tim Waugh 75d0e8 
+  } ifelse
Tim Waugh 75d0e8 
+  100 string cvs show		% Convert to a string and show it...
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+/CUPSLOGO {			% Draw the CUPS logo
Tim Waugh 75d0e8 
+				% height CUPSLOGO
Tim Waugh 75d0e8 
+  % Start with a big C...
Tim Waugh 75d0e8 
+  /Helvetica findfont 1 index scalefont setfont
Tim Waugh 75d0e8 
+  0 setgray
Tim Waugh 75d0e8 
+  0 0 moveto
Tim Waugh 75d0e8 
+  (C) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Then "UNIX Printing System" much smaller...
Tim Waugh 75d0e8 
+  /Helvetica-Bold findfont 1 index 9 div scalefont setfont
Tim Waugh 75d0e8 
+  0.25 mul
Tim Waugh 75d0e8 
+  dup dup 2.0 mul moveto
Tim Waugh 75d0e8 
+  (UNIX) show
Tim Waugh 75d0e8 
+  dup dup 1.6 mul moveto
Tim Waugh 75d0e8 
+  (Printing) show
Tim Waugh 75d0e8 
+  dup 1.2 mul moveto
Tim Waugh 75d0e8 
+  (System) show
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+/ESPLOGO {			% Draw the ESP logo
Tim Waugh 75d0e8 
+				% height ESPLOGO
Tim Waugh 75d0e8 
+  % Compute the size of the logo...
Tim Waugh 75d0e8 
+  0 0
Tim Waugh 75d0e8 
+  2 index 1.5 mul 3 index
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Do the "metallic" fill from 10% black to 40% black...
Tim Waugh 75d0e8 
+  1 -0.001 0 {
Tim Waugh 75d0e8 
+    dup			% loopval
Tim Waugh 75d0e8 
+    -0.15 mul		% loopval * -0.15
Tim Waugh 75d0e8 
+    0.9 add		% 0.9 - loopval * 0.15
Tim Waugh 75d0e8 
+    setgray		% set gray shade
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    0			% x
Tim Waugh 75d0e8 
+    1 index neg		% loopval
Tim Waugh 75d0e8 
+    1 add		% 1 - loopval
Tim Waugh 75d0e8 
+    3 index		% height
Tim Waugh 75d0e8 
+    mul			% height * (1 - loopval)
Tim Waugh 75d0e8 
+    moveto		% starting point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    dup			% loopval
Tim Waugh 75d0e8 
+    3 index		% width
Tim Waugh 75d0e8 
+    mul			% loopval * width
Tim Waugh 75d0e8 
+    2 index		% height
Tim Waugh 75d0e8 
+    lineto		% Next point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    0			% x
Tim Waugh 75d0e8 
+    2 index		% height
Tim Waugh 75d0e8 
+    lineto		% Next point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    closepath
Tim Waugh 75d0e8 
+    fill
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    dup			% loopval
Tim Waugh 75d0e8 
+    0.15 mul		% loopval * 0.15
Tim Waugh 75d0e8 
+    0.6 add		% 0.6 + loopval * 0.15
Tim Waugh 75d0e8 
+    setgray
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    dup			% loopval
Tim Waugh 75d0e8 
+    neg 1 add		% 1 - loopval
Tim Waugh 75d0e8 
+    3 index		% width
Tim Waugh 75d0e8 
+    mul			% (1 - loopval) * width
Tim Waugh 75d0e8 
+    0			% y
Tim Waugh 75d0e8 
+    moveto		% Starting point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    2 index		% width
Tim Waugh 75d0e8 
+    exch		% loopval
Tim Waugh 75d0e8 
+    2 index		% height
Tim Waugh 75d0e8 
+    mul			% loopval * height
Tim Waugh 75d0e8 
+    lineto		% Next point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    1 index		% width
Tim Waugh 75d0e8 
+    0			% y
Tim Waugh 75d0e8 
+    lineto		% Next point
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+    closepath
Tim Waugh 75d0e8 
+    fill
Tim Waugh 75d0e8 
+  } for
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  0 setgray rectstroke
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /Helvetica-BoldOblique findfont 1 index 3 div scalefont setfont
Tim Waugh 75d0e8 
+  dup 40 div
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  dup 4 mul 1 index 25 mul moveto (E) show
Tim Waugh 75d0e8 
+  dup 10 mul 1 index 15 mul moveto (S) show
Tim Waugh 75d0e8 
+  dup 16 mul 1 index 5 mul moveto (P) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /Helvetica-BoldOblique findfont 2 index 5 div scalefont setfont
Tim Waugh 75d0e8 
+  dup 14 mul 1 index 29 mul moveto (asy) show
Tim Waugh 75d0e8 
+  dup 20 mul 1 index 19 mul moveto (oftware) show
Tim Waugh 75d0e8 
+  dup 26 mul 1 index 9 mul moveto (roducts) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pop
Tim Waugh 75d0e8 
+} bind def
Tim Waugh 75d0e8 
+%%EndResource
Tim Waugh 75d0e8 
+%%EndProlog
Tim Waugh 75d0e8 
+%%Page: 1 1
Tim Waugh 75d0e8 
+gsave
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Determine the imageable area and device resolution...
Tim Waugh 75d0e8 
+  initclip newpath clippath pathbbox	% Get bounding rectangle
Tim Waugh 75d0e8 
+  72 div /pageTop exch def		% Get top margin in inches
Tim Waugh 75d0e8 
+  72 div /pageRight exch def		% Get right margin in inches
Tim Waugh 75d0e8 
+  72 div /pageBottom exch def		% Get bottom margin in inches
Tim Waugh 75d0e8 
+  72 div /pageLeft exch def		% Get left margin in inches
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /pageWidth pageRight pageLeft sub def	% pageWidth = pageRight - pageLeft
Tim Waugh 75d0e8 
+  /pageHeight pageTop pageBottom sub def% pageHeight = pageTop - pageBottom
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /boxWidth				% width of text box
Tim Waugh 75d0e8 
+  pageWidth pageHeight lt
Tim Waugh 75d0e8 
+  { pageWidth 54 mul }
Tim Waugh 75d0e8 
+  { pageHeight 42 mul }
Tim Waugh 75d0e8 
+  ifelse def
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  newpath				% Clear bounding path
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Create fonts...
Tim Waugh 75d0e8 
+  /bigFont /Helvetica-Bold findfont	% bigFont = Helvetica-Bold
Tim Waugh 75d0e8 
+  pageHeight 3 mul scalefont def	% size = pageHeight * 3 (nominally 33)
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  /mediumFont /Helvetica findfont	% mediumFont = Helvetica
Tim Waugh 75d0e8 
+  pageHeight 1.5 mul scalefont def	% size = pageHeight * 1.5 (nominally 16.5)
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Offset page to account for lower-left margin...
Tim Waugh 75d0e8 
+  pageLeft 72 mul
Tim Waugh 75d0e8 
+  pageBottom 72 mul
Tim Waugh 75d0e8 
+  translate
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Job information box...
Tim Waugh 75d0e8 
+  pageWidth 36 mul 9 add		% x = pageWidth * 1/2 * 72 + 9
Tim Waugh 75d0e8 
+  boxWidth 0.5 mul sub			% x-= 1/2 box width
Tim Waugh 75d0e8 
+  pageHeight 30 mul 9 sub		% y = pageHeight * 1/2 * 72 - 9
Tim Waugh 75d0e8 
+  boxWidth				% w = box width
Tim Waugh 75d0e8 
+  pageHeight 14 mul			% h = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  0.5 setgray rectfill			% Draw a shadow
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  boxWidth 0.5 mul sub			% x-= 1/2 box width
Tim Waugh 75d0e8 
+  pageHeight 30 mul			% y = pageHeight * 1/4 * 72
Tim Waugh 75d0e8 
+  boxWidth				% w = box width
Tim Waugh 75d0e8 
+  pageHeight 14 mul			% h = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  4 copy 1 setgray rectfill		% Clear the box to white
Tim Waugh 75d0e8 
+  0 setgray rectstroke			% Draw a black box around it...
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Job information text...
Tim Waugh 75d0e8 
+  mediumFont setfont			% Medium sized font
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 36 mul			% y = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 5 mul add			% y += 2 lines
Tim Waugh 75d0e8 
+  2 copy				% Copy X & Y
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  (Job ID: ) RIGHT
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  ({printer-name}-{job-id}) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 36 mul			% y = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 2 mul add			% y += 1 line
Tim Waugh 75d0e8 
+  2 copy				% Copy X & Y
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  (Title: ) RIGHT
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  ({job-name}) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 36 mul			% y = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight -1 mul add			% y -= 1 line
Tim Waugh 75d0e8 
+  2 copy				% Copy X & Y
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  (Requesting User: ) RIGHT
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  ({job-originating-user-name}) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  pageWidth 36 mul			% x = pageWidth * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight 36 mul			% y = pageHeight * 1/2 * 72
Tim Waugh 75d0e8 
+  pageHeight -4 mul add			% y -= 2 lines
Tim Waugh 75d0e8 
+  2 copy				% Copy X & Y
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  (Billing Info: ) RIGHT
Tim Waugh 75d0e8 
+  moveto
Tim Waugh 75d0e8 
+  ({?job-billing}) show
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % Then the CUPS logo....
Tim Waugh 75d0e8 
+  gsave
Tim Waugh 75d0e8 
+    pageWidth 4 mul
Tim Waugh 75d0e8 
+    pageWidth 6 mul
Tim Waugh 75d0e8 
+    translate
Tim Waugh 75d0e8 
+    pageWidth 9 mul CUPSLOGO
Tim Waugh 75d0e8 
+  grestore
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+  % And the ESP logo....
Tim Waugh 75d0e8 
+  gsave
Tim Waugh 75d0e8 
+    pageWidth 59 mul
Tim Waugh 75d0e8 
+    pageWidth 6 mul
Tim Waugh 75d0e8 
+    translate
Tim Waugh 75d0e8 
+    pageWidth 6 mul ESPLOGO
Tim Waugh 75d0e8 
+  grestore
Tim Waugh 75d0e8 
+% Show the page...
Tim Waugh 75d0e8 
+grestore
Tim Waugh 75d0e8 
+showpage
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+% End of "$Id: mls_template,v 1.1 2005/06/27 18:44:46 colmo Exp $".
Tim Waugh 75d0e8 
+%
Tim Waugh 75d0e8 
+%%EOF
Tim Waugh f4b662 
--- cups-1.2.8/config.h.in.lspp	2007-02-06 16:04:25.000000000 +0000
Tim Waugh f4b662 
+++ cups-1.2.8/config.h.in	2007-03-02 14:06:43.000000000 +0000
Tim Waugh f4b662 
@@ -468,6 +468,13 @@
Tim Waugh d04237 
 #undef HAVE_APPLETALK_AT_PROTO_H
Tim Waugh d04237
Tim Waugh d04237
Tim Waugh d04237 
+/*
Tim Waugh d04237 
+ * Are we trying to meet LSPP requirements?
Tim Waugh d04237 
+ */
Tim Waugh d04237 
+
Tim Waugh d04237 
+#undef WITH_LSPP
Tim Waugh d04237 
+
Tim Waugh d04237 
+
Tim Waugh d04237 
 #endif /* !_CUPS_CONFIG_H_ */
Tim Waugh d04237
Tim Waugh d04237 
 /*
Tim Waugh f4b662 
--- cups-1.2.8/configure.in.lspp	2006-12-06 20:10:16.000000000 +0000
Tim Waugh f4b662 
+++ cups-1.2.8/configure.in	2007-03-02 14:06:43.000000000 +0000
Tim Waugh f4b662 
@@ -48,6 +48,8 @@
Tim Waugh f4b662 
 sinclude(config-scripts/cups-pdf.m4)
Tim Waugh f4b662 
 sinclude(config-scripts/cups-scripting.m4)
Tim Waugh f4b662
Tim Waugh f4b662 
+sinclude(config-scripts/cups-lspp.m4)
Tim Waugh f4b662 
+
Tim Waugh f4b662 
 INSTALL_LANGUAGES=""
Tim Waugh f4b662 
 UNINSTALL_LANGUAGES=""
Tim Waugh f4b662 
 LANGFILES=""
Tim Waugh f4b662 
--- cups-1.2.8/cups/cups.h.lspp	2007-01-10 16:23:06.000000000 +0000
Tim Waugh f4b662 
+++ cups-1.2.8/cups/cups.h	2007-03-02 14:06:43.000000000 +0000
Tim Waugh f4b662 
@@ -24,6 +24,9 @@
Tim Waugh f4b662 
  *   This file is subject to the Apple OS-Developed Software exception.
Tim Waugh 75d0e8 
  */
Tim Waugh 75d0e8
Tim Waugh f4b662 
+/* Copyright (C) 2005 Trusted Computer Solutions, Inc. */
Tim Waugh 75d0e8 
+/* (c) Copyright 2005-2006 Hewlett-Packard Development Company, L.P. */
Tim Waugh 75d0e8 
+
Tim Waugh f4b662 
 #ifndef _CUPS_CUPS_H_
Tim Waugh f4b662 
 #  define _CUPS_CUPS_H_
Tim Waugh f4b662
Tim Waugh f4b662 
@@ -75,6 +78,12 @@
Tim Waugh f4b662 
 #  define CUPS_DATE_ANY		-1
Tim Waugh f4b662
Tim Waugh f4b662
Tim Waugh f4b662 
+# ifdef WITH_LSPP
Tim Waugh f4b662 
+# define MLS_CONFIG "mls"
Tim Waugh f4b662 
+# define TE_CONFIG "te"
Tim Waugh f4b662 
+# define SELINUX_CONFIG "SELinux"
Tim Waugh f4b662 
+# define UNKNOWN_SL "UNKNOWN SL"
Tim Waugh f4b662 
+# endif /* WITH_LSPP */
Tim Waugh 75d0e8 
 /*
Tim Waugh f4b662 
  * Types and structures...
Tim Waugh f4b662 
  */
Tim Waugh f4b662 
--- cups-1.2.8/scheduler/client.h.lspp	2007-01-22 22:04:43.000000000 +0000
Tim Waugh f4b662 
+++ cups-1.2.8/scheduler/client.h	2007-03-02 14:06:43.000000000 +0000
Tim Waugh f4b662 
@@ -22,6 +22,13 @@
Tim Waugh f4b662 
  *         WWW: http://www.cups.org
Tim Waugh 75d0e8 
  */
Tim Waugh 75d0e8
Tim Waugh f4b662 
+/* Copyright (C) 2005 Trusted Computer Solutions, Inc. */
Tim Waugh f4b662 
+/* (c) Copyright 2005-2006 Hewlett-Packard Development Company, L.P. */
Tim Waugh f4b662 
+
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+#include <selinux/selinux.h>
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
+
Tim Waugh 75d0e8 
 /*
Tim Waugh f4b662 
  * HTTP client structure...
Tim Waugh f4b662 
  */
Tim Waugh f4b662 
@@ -56,6 +63,10 @@
Tim Waugh f4b662 
   http_addr_t		clientaddr;	/* Client address */
Tim Waugh f4b662 
   char			servername[256];/* Server name for connection */
Tim Waugh f4b662 
   int			serverport;	/* Server port for connection */
Tim Waugh d04237 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  security_context_t	scon;		/* Security context of connection */
Tim Waugh f4b662 
+  uid_t			auid;		/* Audit loginuid of the client */
Tim Waugh d04237 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
 };
Tim Waugh d04237
Tim Waugh f4b662 
 #define HTTP(con) &((con)->http)
Tim Waugh f4b662 
@@ -120,6 +131,9 @@
Tim Waugh f4b662 
 extern void	cupsdStopListening(void);
Tim Waugh f4b662 
 extern void	cupsdUpdateCGI(void);
Tim Waugh f4b662 
 extern int	cupsdWriteClient(cupsd_client_t *con);
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+extern uid_t	client_pid_to_auid(pid_t clipid);
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh d04237
Tim Waugh d04237
Tim Waugh d04237 
 /*
Tim Waugh ee6b34 
--- cups-1.2.8/scheduler/conf.c	2007-03-02 14:06:43.000000000 +0000
Tim Waugh ee6b34 
+++ cups-1.2.4-secheck/scheduler/conf.c	2007-03-07 11:22:58.000000000 -0500
Tim Waugh f4b662 
@@ -35,6 +35,7 @@
Tim Waugh f4b662 
  *   read_configuration()     - Read a configuration file.
Tim Waugh f4b662 
  *   read_location()          - Read a <Location path> definition.
Tim Waugh f4b662 
  *   read_policy()            - Read a <Policy name> definition.
Tim Waugh f4b662 
+ *   is_lspp_config()         - Is the system configured for LSPP
Tim Waugh d04237 
  */
Tim Waugh f4b662
Tim Waugh f4b662 
 /*
Tim Waugh f4b662 
@@ -60,6 +61,9 @@
Tim Waugh f4b662 
 #  define INADDR_NONE	0xffffffff
Tim Waugh f4b662 
 #endif /* !INADDR_NONE */
Tim Waugh d04237
Tim Waugh 22cc21 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+#  include <libaudit.h>
Tim Waugh 22cc21 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8
Tim Waugh d04237 
 /*
Tim Waugh f4b662 
  * Configuration variable structure...
Tim Waugh ee6b34 
@@ -161,6 +165,10 @@
Tim Waugh f4b662 
   { "ServerKey",		&ServerKey,		CUPSD_VARTYPE_STRING },
Tim Waugh f4b662 
 #  endif /* HAVE_LIBSSL || HAVE_GNUTLS */
Tim Waugh f4b662 
 #endif /* HAVE_SSL */
Tim Waugh 22cc21 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  { "AuditLog",			&AuditLog,		CUPSD_VARTYPE_INTEGER },
Tim Waugh ee6b34 
+  { "PerPageLabels",		&PerPageLabels,		CUPSD_VARTYPE_BOOLEAN },
Tim Waugh d04237 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
 #ifdef HAVE_LAUNCHD
Tim Waugh f4b662 
   { "LaunchdTimeout",		&LaunchdTimeout,	CUPSD_VARTYPE_INTEGER },
Tim Waugh f4b662 
   { "LaunchdConf",		&LaunchdConf,		CUPSD_VARTYPE_STRING },
Tim Waugh ee6b34 
@@ -223,6 +231,9 @@
Tim Waugh f4b662 
 		*old_requestroot;	/* Old RequestRoot */
Tim Waugh f4b662 
   const char	*tmpdir;		/* TMPDIR environment variable */
Tim Waugh f4b662 
   struct stat	tmpinfo;		/* Temporary directory info */
Tim Waugh d04237 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  char		*audit_message;		/* Audit message string */
Tim Waugh 22cc21 
+#endif /* WITH_LSPP */
Tim Waugh 22cc21
Tim Waugh 75d0e8
Tim Waugh f4b662 
  /*
Tim Waugh ee6b34 
@@ -470,6 +481,25 @@
Tim Waugh f4b662
Tim Waugh f4b662 
   RunUser = getuid();
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh ee6b34 
+  if (AuditLog != -1)
Tim Waugh ee6b34 
+  {
Tim Waugh ee6b34 
+   /*
Tim Waugh ee6b34 
+    * ClassifyOverride is set during read_configuration, if its ON, report it now
Tim Waugh ee6b34 
+    */
Tim Waugh ee6b34 
+    if (ClassifyOverride)
Tim Waugh ee6b34 
+      audit_log_user_message(AuditLog, AUDIT_USYS_CONFIG,
Tim Waugh ee6b34 
+                "[Config] ClassifyOverride=enabled Users can override print banners",
Tim Waugh ee6b34 
+                ServerName, NULL, NULL, 1);
Tim Waugh ee6b34 
+   /*
Tim Waugh ee6b34 
+    * PerPageLabel is set during read_configuration, if its OFF, report it now
Tim Waugh ee6b34 
+    */
Tim Waugh ee6b34 
+    if (!PerPageLabels)
Tim Waugh ee6b34 
+      audit_log_user_message(AuditLog, AUDIT_USYS_CONFIG,
Tim Waugh ee6b34 
+                "[Config] PerPageLabels=disabled", ServerName, NULL, NULL, 1);
Tim Waugh ee6b34 
+  }
Tim Waugh f4b662 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
+
Tim Waugh f4b662 
  /*
Tim Waugh f4b662 
   * See if the ServerName is an IP address...
Tim Waugh f4b662 
   */
Tim Waugh ee6b34 
@@ -777,11 +807,23 @@
Tim Waugh f4b662 
   if (MaxActiveJobs > (MaxFDs / 3))
Tim Waugh f4b662 
     MaxActiveJobs = MaxFDs / 3;
Tim Waugh f4b662
Tim Waugh f4b662 
-  if (Classification && !strcasecmp(Classification, "none"))
Tim Waugh f4b662 
+  if (Classification && strcasecmp(Classification, "none") == 0)
Tim Waugh f4b662 
     cupsdClearString(&Classification);
Tim Waugh f4b662
Tim Waugh f4b662 
   if (Classification)
Tim Waugh f4b662 
+  {
Tim Waugh f4b662 
     cupsdLogMessage(CUPSD_LOG_INFO, "Security set to \"%s\"", Classification);
Tim Waugh f4b662 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+    if (AuditLog != -1)
Tim Waugh d04237 
+    {
Tim Waugh f4b662 
+      audit_message = NULL;
Tim Waugh f4b662 
+      cupsdSetStringf(&audit_message, "[Config] Classification=%s", Classification);
Tim Waugh f4b662 
+      audit_log_user_message(AuditLog, AUDIT_LABEL_LEVEL_CHANGE, audit_message,
Tim Waugh f4b662 
+                             ServerName, NULL, NULL, 1);
Tim Waugh f4b662 
+      free(audit_message);
Tim Waugh d04237 
+    }
Tim Waugh f4b662 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
+  }
Tim Waugh f4b662
Tim Waugh f4b662 
  /*
Tim Waugh f4b662 
   * Update the MaxClientsPerHost value, as needed...
Tim Waugh ee6b34 
@@ -3295,6 +3337,18 @@
Tim Waugh f4b662 
   return (0);
Tim Waugh f4b662 
 }
Tim Waugh f4b662
Tim Waugh f4b662 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+int is_lspp_config()
Tim Waugh f4b662 
+{
Tim Waugh f4b662 
+  if (Classification != NULL)
Tim Waugh f4b662 
+    return ((strcasecmp(Classification, MLS_CONFIG) == 0)
Tim Waugh f4b662 
+            || (strcasecmp(Classification, TE_CONFIG) == 0)
Tim Waugh f4b662 
+            || (strcasecmp(Classification, SELINUX_CONFIG) == 0));
Tim Waugh f4b662 
+  else
Tim Waugh f4b662 
+    return 0;
Tim Waugh f4b662 
+}
Tim Waugh f4b662 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
+
Tim Waugh f4b662
Tim Waugh f4b662 
 /*
Tim Waugh f4b662 
  * End of "$Id: conf.c 6205 2007-01-22 22:04:43Z mike $".
Tim Waugh f4b662 
--- cups-1.2.8/scheduler/client.c.lspp	2007-02-07 20:54:37.000000000 +0000
Tim Waugh f4b662 
+++ cups-1.2.8/scheduler/client.c	2007-03-02 14:06:43.000000000 +0000
Tim Waugh f4b662 
@@ -44,12 +44,17 @@
Tim Waugh f4b662 
  *   make_certificate()      - Make a self-signed SSL/TLS certificate.
Tim Waugh f4b662 
  *   pipe_command()          - Pipe the output of a command to the remote client.
Tim Waugh f4b662 
  *   write_file()            - Send a file via HTTP.
Tim Waugh f4b662 
+ *   client_pid_to_auid()    - Get the audit login uid of the client.
Tim Waugh f4b662 
  */
Tim Waugh f4b662
Tim Waugh f4b662 
+/* Copyright (C) 2005 Trusted Computer Solutions, Inc. */
Tim Waugh f4b662 
+/* (c) Copyright 2005-2006 Hewlett-Packard Development Company, L.P. */
Tim Waugh f4b662 
+
Tim Waugh f4b662 
 /*
Tim Waugh f4b662 
  * Include necessary headers...
Tim Waugh f4b662 
  */
Tim Waugh f4b662
Tim Waugh f4b662 
+#define _GNU_SOURCE
Tim Waugh f4b662 
 #include <cups/http-private.h>
Tim Waugh f4b662 
 #include "cupsd.h"
Tim Waugh f4b662
Tim Waugh f4b662 
@@ -81,6 +86,12 @@
Tim Waugh f4b662 
 #  include <gnutls/x509.h>
Tim Waugh f4b662 
 #endif /* HAVE_GNUTLS */
Tim Waugh f4b662
Tim Waugh f4b662 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+#include <selinux/selinux.h>
Tim Waugh f4b662 
+#include <selinux/context.h>
Tim Waugh f4b662 
+#include <fcntl.h>
Tim Waugh f4b662 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
+
Tim Waugh f4b662
Tim Waugh f4b662 
 /*
Tim Waugh f4b662 
  * Local functions...
Tim Waugh f4b662 
@@ -339,6 +350,57 @@
Tim Waugh f4b662 
     }
Tim Waugh f4b662 
   }
Tim Waugh f4b662
Tim Waugh f4b662 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  if (is_lspp_config())
Tim Waugh f4b662 
+  {
Tim Waugh f4b662 
+    struct ucred cr;
Tim Waugh f4b662 
+    unsigned int cl=sizeof(cr);
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+    if (getsockopt(con->http.fd, SOL_SOCKET, SO_PEERCRED, &cr, &cl) == 0)
Tim Waugh d04237 
+    {
Tim Waugh f4b662 
+     /*
Tim Waugh f4b662 
+      * client_pid_to_auid() can be racey
Tim Waugh f4b662 
+      * In this case the pid is based on a socket connected to the client
Tim Waugh f4b662 
+      */
Tim Waugh f4b662 
+      if ((con->auid = client_pid_to_auid(cr.pid)) == -1)
Tim Waugh d04237 
+      {
Tim Waugh f4b662 
+        close(con->http.fd);
Tim Waugh f4b662 
+        cupsdLogMessage(CUPSD_LOG_ERROR, "cupsdAcceptClient: "
Tim Waugh f4b662 
+                        "unable to determine client auid for client pid=%d", cr.pid);
Tim Waugh f4b662 
+        free(con);
Tim Waugh d04237 
+        return;
Tim Waugh d04237 
+      }
Tim Waugh f4b662 
+      cupsdLogMessage(CUPSD_LOG_INFO, "cupsdAcceptClient: peer's pid=%d, uid=%d, gid=%d, auid=%d",
Tim Waugh f4b662 
+                      cr.pid, cr.uid, cr.gid, con->auid);
Tim Waugh d04237 
+    }
Tim Waugh d04237 
+    else
Tim Waugh d04237 
+    {
Tim Waugh f4b662 
+      close(con->http.fd);
Tim Waugh f4b662 
+      cupsdLogMessage(CUPSD_LOG_ERROR, "cupsdAcceptClient: getsockopt() failed");
Tim Waugh f4b662 
+      free(con);
Tim Waugh f4b662 
+      return;
Tim Waugh d04237 
+    }
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+   /*
Tim Waugh f4b662 
+    * get the context of the peer connection
Tim Waugh f4b662 
+    */
Tim Waugh f4b662 
+    if (getpeercon(con->http.fd, &con->scon))
Tim Waugh d04237 
+    {
Tim Waugh f4b662 
+      close(con->http.fd);
Tim Waugh f4b662 
+      cupsdLogMessage(CUPSD_LOG_ERROR, "cupsdAcceptClient: getpeercon() failed");
Tim Waugh f4b662 
+      free(con);
Tim Waugh f4b662 
+      return;
Tim Waugh d04237 
+    }
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+    cupsdLogMessage(CUPSD_LOG_INFO, "cupsdAcceptClient: client context=%s", con->scon);
Tim Waugh f4b662 
+  }
Tim Waugh f4b662 
+  else
Tim Waugh f4b662 
+  {
Tim Waugh f4b662 
+    cupsdLogMessage(CUPSD_LOG_DEBUG, "cupsdAcceptClient: skipping getpeercon()");
Tim Waugh f4b662 
+    cupsdSetString(&con->scon, UNKNOWN_SL);
Tim Waugh d04237 
+  }
Tim Waugh d04237 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8 
+
Tim Waugh f4b662 
 #ifdef AF_INET6
Tim Waugh f4b662 
   if (con->http.hostaddr->addr.sa_family == AF_INET6)
Tim Waugh f4b662 
     cupsdLogMessage(CUPSD_LOG_DEBUG, "cupsdAcceptClient: %d from %s:%d (IPv6)",
Tim Waugh f4b662 
@@ -729,6 +791,13 @@
Tim Waugh f4b662 
   mime_type_t		*type;		/* MIME type of file */
Tim Waugh f4b662 
   cupsd_printer_t	*p;		/* Printer */
Tim Waugh f4b662 
   static unsigned	request_id = 0;	/* Request ID for temp files */
Tim Waugh d04237 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  security_context_t	spoolcon;	/* context of the job file */
Tim Waugh f4b662 
+  context_t		clicon;		/* contex_t container for con->scon */
Tim Waugh f4b662 
+  context_t		tmpcon;		/* temp context to swap the level */
Tim Waugh f4b662 
+  char			*clirange;	/* SELinux sensitivity range */
Tim Waugh f4b662 
+  char			*cliclearance;	/* SELinux low end clearance */
Tim Waugh d04237 
+#endif /* WITH_LSPP */
Tim Waugh d04237
Tim Waugh d04237
Tim Waugh f4b662 
   status = HTTP_CONTINUE;
Tim Waugh f4b662 
@@ -1832,6 +1901,63 @@
Tim Waugh f4b662 
 	  fchmod(con->file, 0640);
Tim Waugh f4b662 
 	  fchown(con->file, RunUser, Group);
Tim Waugh f4b662 
           fcntl(con->file, F_SETFD, fcntl(con->file, F_GETFD) | FD_CLOEXEC);
Tim Waugh d04237 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+          if (strncmp(con->scon, UNKNOWN_SL, strlen(UNKNOWN_SL)) != 0)
Tim Waugh f4b662 
+          {
Tim Waugh f4b662 
+            if (getfilecon(con->filename, &spoolcon) == -1)
Tim Waugh f4b662 
+            {
Tim Waugh f4b662 
+              cupsdSendError(con, HTTP_SERVER_ERROR);
Tim Waugh f4b662 
+              return (cupsdCloseClient(con));
Tim Waugh f4b662 
+            }
Tim Waugh f4b662 
+            clicon = context_new(con->scon);
Tim Waugh f4b662 
+            tmpcon = context_new(spoolcon);
Tim Waugh f4b662 
+            freecon(spoolcon);
Tim Waugh f4b662 
+            if (!clicon || !tmpcon)
Tim Waugh f4b662 
+            {
Tim Waugh f4b662 
+              cupsdSendError(con, HTTP_SERVER_ERROR);
Tim Waugh f4b662 
+              if (clicon)
Tim Waugh f4b662 
+                context_free(clicon);
Tim Waugh f4b662 
+              if (tmpcon)
Tim Waugh f4b662 
+                context_free(tmpcon);
Tim Waugh f4b662 
+              return (cupsdCloseClient(con));
Tim Waugh f4b662 
+            }
Tim Waugh f4b662 
+            clirange = strdup(context_range_get(clicon));
Tim Waugh f4b662 
+            if ((cliclearance = strtok(clirange, "-")) != NULL)
Tim Waugh f4b662 
+            {
Tim Waugh f4b662 
+              if (context_range_set(tmpcon, cliclearance) == -1)
Tim Waugh f4b662 
+              {
Tim Waugh f4b662 
+                cupsdSendError(con, HTTP_SERVER_ERROR);
Tim Waugh f4b662 
+                free(clirange);
Tim Waugh f4b662 
+                context_free(tmpcon);
Tim Waugh f4b662 
+                context_free(clicon);
Tim Waugh f4b662 
+                return (cupsdCloseClient(con));
Tim Waugh f4b662 
+              }
Tim Waugh f4b662 
+            }
Tim Waugh f4b662 
+            else
Tim Waugh f4b662 
+            {
Tim Waugh f4b662 
+              if (context_range_set(tmpcon, (context_range_get(clicon))) == -1)
Tim Waugh f4b662 
+              {
Tim Waugh f4b662 
+                cupsdSendError(con, HTTP_SERVER_ERROR);
Tim Waugh f4b662 
+                free(clirange);
Tim Waugh f4b662 
+                context_free(tmpcon);
Tim Waugh f4b662 
+                context_free(clicon);
Tim Waugh f4b662 
+                return (cupsdCloseClient(con));
Tim Waugh f4b662 
+              }
Tim Waugh f4b662 
+            }
Tim Waugh f4b662 
+            free(clirange);
Tim Waugh f4b662 
+            if (setfilecon(con->filename, context_str(tmpcon)) == -1)
Tim Waugh f4b662 
+            {
Tim Waugh f4b662 
+              cupsdSendError(con, HTTP_SERVER_ERROR);
Tim Waugh f4b662 
+              context_free(tmpcon);
Tim Waugh f4b662 
+              context_free(clicon);
Tim Waugh f4b662 
+              return (cupsdCloseClient(con));
Tim Waugh f4b662 
+            }
Tim Waugh f4b662 
+            cupsdLogMessage(CUPSD_LOG_DEBUG2, "cupsdReadClient: %s set to %s",
Tim Waugh f4b662 
+                            con->filename, context_str(tmpcon));
Tim Waugh f4b662 
+            context_free(tmpcon);
Tim Waugh f4b662 
+            context_free(clicon);
Tim Waugh f4b662 
+          }
Tim Waugh f4b662 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
 	}
Tim Waugh f4b662
Tim Waugh f4b662 
 	if (con->http.state != HTTP_POST_SEND)
Tim Waugh f4b662 
@@ -3906,6 +4032,50 @@
Tim Waugh f4b662 
 #endif /* HAVE_SSL */
Tim Waugh f4b662
Tim Waugh f4b662
Tim Waugh f4b662 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+/*
Tim Waugh f4b662 
+ * 'client_pid_to_auid()' - Using the client's pid, read /proc and determine the loginuid.
Tim Waugh f4b662 
+ */
Tim Waugh 75d0e8 
+
Tim Waugh f4b662 
+uid_t client_pid_to_auid(pid_t clipid)
Tim Waugh f4b662 
+{
Tim Waugh f4b662 
+  uid_t uid;
Tim Waugh f4b662 
+  int len, in;
Tim Waugh f4b662 
+  char buf[16] = {0};
Tim Waugh f4b662 
+  char fname[32] = {0};
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+
Tim Waugh f4b662 
+ /*
Tim Waugh f4b662 
+  * Hopefully this pid is still the one we are interested in.
Tim Waugh f4b662 
+  */
Tim Waugh f4b662 
+  snprintf(fname, 32, "/proc/%d/loginuid", clipid);
Tim Waugh f4b662 
+  in = open(fname, O_NOFOLLOW|O_RDONLY);
Tim Waugh 75d0e8 
+
Tim Waugh f4b662 
+  if (in < 0)
Tim Waugh f4b662 
+    return -1;
Tim Waugh 5dd986 
+
Tim Waugh f4b662 
+  errno = 0;
Tim Waugh 5dd986 
+
Tim Waugh f4b662 
+  do {
Tim Waugh f4b662 
+    len = read(in, buf, sizeof(buf));
Tim Waugh f4b662 
+  } while (len < 0 && errno == EINTR);
Tim Waugh 75d0e8 
+
Tim Waugh f4b662 
+  close(in);
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+  if (len < 0 || len >= sizeof(buf))
Tim Waugh f4b662 
+    return -1;
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+  errno = 0;
Tim Waugh f4b662 
+  buf[len] = 0;
Tim Waugh f4b662 
+  uid = strtol(buf, 0, 10);
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+  if (errno != 0)
Tim Waugh f4b662 
+    return -1;
Tim Waugh f4b662 
+  else
Tim Waugh f4b662 
+    return uid;
Tim Waugh f4b662 
+}
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
 /*
Tim Waugh f4b662 
  * 'pipe_command()' - Pipe the output of a command to the remote client.
Tim Waugh 75d0e8 
  */
Tim Waugh f4b662 
--- cups-1.2.8/scheduler/main.c.lspp	2007-03-02 14:06:43.000000000 +0000
Tim Waugh f4b662 
+++ cups-1.2.8/scheduler/main.c	2007-03-02 14:06:43.000000000 +0000
Tim Waugh d04237 
@@ -49,6 +49,8 @@
Tim Waugh d04237 
  *   usage()                   - Show scheduler usage.
Tim Waugh 75d0e8 
  */
Tim Waugh 75d0e8
Tim Waugh d04237 
+/* (c) Copyright 2005-2006 Hewlett-Packard Development Company, L.P. */
Tim Waugh d04237 
+
Tim Waugh 75d0e8 
 /*
Tim Waugh d04237 
  * Include necessary headers...
Tim Waugh d04237 
  */
Tim Waugh d04237 
@@ -71,6 +73,9 @@
Tim Waugh d04237 
 #  include <notify.h>
Tim Waugh d04237 
 #endif /* HAVE_NOTIFY_H */
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh 75d0e8 
+#  include <libaudit.h>
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
 /*
Tim Waugh d04237 
  * Local functions...
Tim Waugh d04237 
@@ -156,6 +161,9 @@
Tim Waugh d04237 
   int			launchd_idle_exit;
Tim Waugh d04237 
 					/* Idle exit on select timeout? */
Tim Waugh d04237 
 #endif	/* HAVE_LAUNCHD */
Tim Waugh d04237 
+#if WITH_LSPP
Tim Waugh d04237 
+  auditfail_t           failmode;       /* Action for audit_open failure */
Tim Waugh 5dd986 
+#endif /* WITH_LSPP */
Tim Waugh 5dd986
Tim Waugh 5dd986
Tim Waugh 5dd986 
  /*
Tim Waugh d04237 
@@ -366,6 +374,25 @@
Tim Waugh d04237 
 #endif /* DEBUG */
Tim Waugh d04237 
   }
Tim Waugh 9ad376
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh d04237 
+  if ((AuditLog = audit_open()) < 0 )
Tim Waugh 5dd986 
+  {
Tim Waugh d04237 
+    if (get_auditfail_action(&failmode) == 0)
Tim Waugh 9ad376 
+    {
Tim Waugh d04237 
+      if (failmode == FAIL_LOG)
Tim Waugh d04237 
+      {
Tim Waugh d04237 
+        cupsdLogMessage(CUPSD_LOG_ERROR, "Unable to connect to audit subsystem.");
Tim Waugh d04237 
+        AuditLog = -1;
Tim Waugh d04237 
+      }
Tim Waugh d04237 
+      else if (failmode == FAIL_TERMINATE)
Tim Waugh d04237 
+      {
Tim Waugh d04237 
+        fprintf(stderr, "cupsd: unable to start auditing, terminating");
Tim Waugh d04237 
+        return -1;
Tim Waugh d04237 
+      }
Tim Waugh 9ad376 
+    }
Tim Waugh 5dd986 
+  }
Tim Waugh d04237 
+#endif /* WITH_LSPP */
Tim Waugh d04237 
+
Tim Waugh 5dd986 
  /*
Tim Waugh d04237 
   * Set the timezone info...
Tim Waugh d04237 
   */
Tim Waugh d04237 
@@ -1154,6 +1181,11 @@
Tim Waugh d04237 
   free(input);
Tim Waugh d04237 
   free(output);
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh d04237 
+  if (AuditLog != -1)
Tim Waugh d04237 
+    audit_close(AuditLog);
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 5dd986 
+
Tim Waugh d04237 
   return (!stop_scheduler);
Tim Waugh d04237 
 }
Tim Waugh 5dd986
Tim Waugh ee6b34 
--- cups-1.2.8/scheduler/conf.h	2007-03-02 14:06:43.000000000 +0000
Tim Waugh ee6b34 
+++ cups-1.2.4-secheck/scheduler/conf.h	2007-03-07 11:22:58.000000000 -0500
Tim Waugh ee6b34 
@@ -191,6 +191,12 @@
Tim Waugh f4b662 
 					/* Server key file */
Tim Waugh f4b662 
 #  endif /* HAVE_LIBSSL || HAVE_GNUTLS */
Tim Waugh f4b662 
 #endif /* HAVE_SSL */
Tim Waugh 5dd986 
+#ifdef WITH_LSPP
Tim Waugh ee6b34 
+VAR int			AuditLog		VALUE(-1),
Tim Waugh f4b662 
+					/* File descriptor for audit */
Tim Waugh ee6b34 
+			PerPageLabels		VALUE(TRUE);
Tim Waugh ee6b34 
+					/* Put the label on each page */
Tim Waugh 5dd986 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8
Tim Waugh f4b662 
 #ifdef HAVE_LAUNCHD
Tim Waugh f4b662 
 VAR int			LaunchdTimeout		VALUE(DEFAULT_TIMEOUT);
Tim Waugh ee6b34 
@@ -213,6 +219,9 @@
Tim Waugh f4b662 
 ;
Tim Waugh f4b662 
 extern int	cupsdLogPage(cupsd_job_t *job, const char *page);
Tim Waugh f4b662
Tim Waugh f4b662 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+extern int	is_lspp_config(void);
Tim Waugh f4b662 
+#endif /* WITH_LSPP */
Tim Waugh d04237
Tim Waugh f4b662 
 /*
Tim Waugh f4b662 
  * End of "$Id: conf.h 5696 2006-06-26 18:34:20Z mike $".
Tim Waugh f4b662 
--- cups-1.2.8/scheduler/ipp.c.lspp	2007-03-02 14:06:43.000000000 +0000
Tim Waugh f4b662 
+++ cups-1.2.8/scheduler/ipp.c	2007-03-02 14:06:57.000000000 +0000
Tim Waugh f4b662 
@@ -41,6 +41,7 @@
Tim Waugh f4b662 
  *   cancel_all_jobs()           - Cancel all print jobs.
Tim Waugh f4b662 
  *   cancel_job()                - Cancel a print job.
Tim Waugh f4b662 
  *   cancel_subscription()       - Cancel a subscription.
Tim Waugh f4b662 
+ *   check_context()             - Check the SELinux context for a user and job
Tim Waugh f4b662 
  *   check_quotas()              - Check quotas for a printer and user.
Tim Waugh f4b662 
  *   copy_attribute()            - Copy a single attribute.
Tim Waugh f4b662 
  *   copy_attrs()                - Copy attributes from one request to another.
Tim Waugh f4b662 
@@ -95,6 +96,9 @@
Tim Waugh 75d0e8 
  *   validate_user()             - Validate the user for the request.
Tim Waugh 75d0e8 
  */
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
+/* Copyright (C) 2005 Trusted Computer Solutions, Inc. */
Tim Waugh 75d0e8 
+/* (c) Copyright 2005-2006 Hewlett-Packard Development Company, L.P. */
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
 /*
Tim Waugh 75d0e8 
  * Include necessary headers...
Tim Waugh 75d0e8 
  */
Tim Waugh f4b662 
@@ -105,6 +109,14 @@
Tim Waugh 75d0e8 
 #  include <paper.h>
Tim Waugh 75d0e8 
 #endif /* HAVE_LIBPAPER */
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh 75d0e8 
+#include <libaudit.h>
Tim Waugh 75d0e8 
+#include <selinux/selinux.h>
Tim Waugh 75d0e8 
+#include <selinux/context.h>
Tim Waugh 75d0e8 
+#include <selinux/avc.h>
Tim Waugh 75d0e8 
+#include <selinux/flask.h>
Tim Waugh 75d0e8 
+#include <selinux/av_permissions.h>
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
 /*
Tim Waugh d04237 
  * Local functions...
Tim Waugh f4b662 
@@ -130,6 +142,9 @@
Tim Waugh f4b662 
 static void	cancel_all_jobs(cupsd_client_t *con, ipp_attribute_t *uri);
Tim Waugh f4b662 
 static void	cancel_job(cupsd_client_t *con, ipp_attribute_t *uri);
Tim Waugh f4b662 
 static void	cancel_subscription(cupsd_client_t *con, int id);
Tim Waugh f4b662 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+static int	check_context(cupsd_client_t *con, cupsd_job_t *job);
Tim Waugh f4b662 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
 static int	check_quotas(cupsd_client_t *con, cupsd_printer_t *p);
Tim Waugh f4b662 
 static ipp_attribute_t	*copy_attribute(ipp_t *to, ipp_attribute_t *attr,
Tim Waugh f4b662 
 		                        int quickcopy);
Tim Waugh f4b662 
@@ -1159,6 +1174,21 @@
Tim Waugh 75d0e8 
   int		kbytes;			/* Size of print file */
Tim Waugh 75d0e8 
   int		i;			/* Looping var */
Tim Waugh 75d0e8 
   int		lowerpagerange;		/* Page range bound */
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh 75d0e8 
+  char		*audit_message;		/* Audit message string */
Tim Waugh 75d0e8 
+  char		*printerfile;		/* device file pointed to by the printer */
Tim Waugh 9ad376 
+  char		*userheader = NULL;	/* User supplied job-sheets[0] */
Tim Waugh 9ad376 
+  char		*userfooter = NULL;	/* User supplied job-sheets[1] */
Tim Waugh 9ad376 
+  int		override = 0;		/* Was a banner overrode on a job */
Tim Waugh 22cc21 
+  security_id_t	clisid;			/* SELinux SID for the client */
Tim Waugh 22cc21 
+  security_id_t	psid;			/* SELinux SID for the printer */
Tim Waugh 22cc21 
+  context_t	printercon;		/* Printer's context string */
Tim Waugh d04237 
+  struct stat	printerstat;		/* Printer's stat buffer */
Tim Waugh 22cc21 
+  security_context_t	devcon;		/* Printer's SELinux context */
Tim Waugh 22cc21 
+  struct avc_entry_ref	avcref;		/* Pointer to the access vector cache */
Tim Waugh 22cc21 
+  security_class_t	tclass;		/* Object class for the SELinux check */
Tim Waugh 63d099 
+  access_vector_t	avr;		/* Access method being requested */
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
   cupsdLogMessage(CUPSD_LOG_DEBUG2, "add_job(%p[%d], %s)", con,
Tim Waugh f4b662 
@@ -1335,6 +1365,127 @@
Tim Waugh 75d0e8 
     return (NULL);
Tim Waugh 75d0e8 
   }
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh 75d0e8 
+  if (is_lspp_config())
Tim Waugh 75d0e8 
+  {
Tim Waugh 6bb98a 
+    if (!con->scon || strncmp(con->scon, UNKNOWN_SL, strlen(UNKNOWN_SL)) == 0)
Tim Waugh 75d0e8 
+    {
Tim Waugh 75d0e8 
+      cupsdLogMessage(CUPSD_LOG_ERROR, "add_job: missing classification for connection \'%s\'!", dest);
Tim Waugh 75d0e8 
+      send_ipp_status(con, IPP_INTERNAL_ERROR, _("Missing required secuirty attributes."));
Tim Waugh 75d0e8 
+      return (NULL);
Tim Waugh 75d0e8 
+    }
Tim Waugh 75d0e8 
+    else
Tim Waugh 75d0e8 
+    {
Tim Waugh 75d0e8 
+     /*
Tim Waugh 75d0e8 
+      * duplicate the security context and auid of the connection into the job structure
Tim Waugh 75d0e8 
+      */
Tim Waugh 6bb98a 
+      job->scon = strdup(con->scon);
Tim Waugh 6bb98a 
+      job->auid = con->auid;
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+     /*
Tim Waugh 75d0e8 
+      * add the security context to the request so that on a restart the security
Tim Waugh 75d0e8 
+      * attributes will be able to be restored
Tim Waugh 75d0e8 
+      */
Tim Waugh 75d0e8 
+      ippAddString(con->request, IPP_TAG_JOB, IPP_TAG_NAME, "security-context",
Tim Waugh 75d0e8 
+                   NULL, job->scon);
Tim Waugh 75d0e8 
+    }
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+   /*
Tim Waugh 75d0e8 
+    * Perform an access check so that if the user gets feedback at enqueue time
Tim Waugh 75d0e8 
+    */
Tim Waugh 75d0e8 
+
Tim Waugh 9ad376 
+    printerfile = strstr(printer->device_uri, "/dev/");
Tim Waugh 22cc21 
+    if (printerfile == NULL && (strncmp(printer->device_uri, "file:/", 6) == 0))
Tim Waugh 22cc21 
+      printerfile = strdup(printer->device_uri + strlen("file:/"));
Tim Waugh 22cc21 
+
Tim Waugh 9ad376 
+    if (printerfile != NULL)
Tim Waugh 75d0e8 
+    {
Tim Waugh 75d0e8 
+      cupsdLogMessage(CUPSD_LOG_DEBUG, "add_job: Attempting an access check on printer device %s",
Tim Waugh 75d0e8 
+                      printerfile);
Tim Waugh 75d0e8 
+
Tim Waugh d04237 
+      if (lstat(printerfile, &printerstat) < 0)
Tim Waugh d04237 
+      {
Tim Waugh d04237 
+	if (errno != ENOENT)
Tim Waugh d04237 
+	{
Tim Waugh d04237 
+	  send_ipp_status(con, IPP_NOT_AUTHORIZED, _("Unable to stat the printer"));
Tim Waugh d04237 
+	  return (NULL);
Tim Waugh d04237 
+	}
Tim Waugh d04237 
+	/*
Tim Waugh d04237 
+	 * The printer does not exist, so for now assume it's a FileDevice
Tim Waugh d04237 
+	 */
Tim Waugh d04237 
+	tclass = SECCLASS_FILE;
Tim Waugh d04237 
+	avr = FILE__WRITE;
Tim Waugh d04237 
+      }
Tim Waugh d04237 
+      else if (S_ISCHR(printerstat.st_mode))
Tim Waugh d04237 
+      {
Tim Waugh d04237 
+	tclass = SECCLASS_CHR_FILE;
Tim Waugh d04237 
+	avr = CHR_FILE__WRITE;
Tim Waugh d04237 
+      }
Tim Waugh d04237 
+      else if (S_ISREG(printerstat.st_mode))
Tim Waugh d04237 
+      {
Tim Waugh d04237 
+	tclass = SECCLASS_FILE;
Tim Waugh d04237 
+	avr = FILE__WRITE;
Tim Waugh d04237 
+      }
Tim Waugh 63d099 
+      else
Tim Waugh d04237 
+      {
Tim Waugh d04237 
+	send_ipp_status(con, IPP_NOT_AUTHORIZED, _("Printer is not a character device or regular file"));
Tim Waugh d04237 
+	return (NULL);
Tim Waugh d04237 
+      }
Tim Waugh 22cc21 
+      avc_init("cupsd_enqueue_", NULL, NULL, NULL, NULL);
Tim Waugh 22cc21 
+      avc_entry_ref_init(&avcref);
Tim Waugh 22cc21 
+      if (avc_context_to_sid(con->scon, &clisid) != 0)
Tim Waugh 75d0e8 
+      {
Tim Waugh 22cc21 
+        send_ipp_status(con, IPP_NOT_AUTHORIZED, _("Unable to get the SELinux sid of the client"));
Tim Waugh 75d0e8 
+        return (NULL);
Tim Waugh 75d0e8 
+      }
Tim Waugh 22cc21 
+      if (getfilecon(printerfile, &devcon) == -1)
Tim Waugh 22cc21 
+      {
Tim Waugh 22cc21 
+        send_ipp_status(con, IPP_NOT_AUTHORIZED, _("Unable to get the SELinux context of the printer"));
Tim Waugh 22cc21 
+        return (NULL);
Tim Waugh 22cc21 
+      }
Tim Waugh 22cc21 
+      printercon = context_new(devcon);
Tim Waugh 22cc21 
+      cupsdLogMessage(CUPSD_LOG_DEBUG, "add_job: printer context %s client context %s",
Tim Waugh 22cc21 
+                      context_str(printercon), con->scon);
Tim Waugh 22cc21 
+      context_free(printercon);
Tim Waugh 75d0e8 
+
Tim Waugh 22cc21 
+      if (avc_context_to_sid(devcon, &psid) != 0)
Tim Waugh 75d0e8 
+      {
Tim Waugh 22cc21 
+        send_ipp_status(con, IPP_NOT_AUTHORIZED, _("Unable to get the SELinux sid of the printer"));
Tim Waugh 22cc21 
+        freecon(devcon);
Tim Waugh 22cc21 
+        return (NULL);
Tim Waugh 22cc21 
+      }
Tim Waugh 22cc21 
+      freecon(devcon);
Tim Waugh ef70a0 
+      if (avc_has_perm(clisid, psid, tclass, avr, &avcref, NULL) != 0)
Tim Waugh 22cc21 
+      {
Tim Waugh 22cc21 
+       /*
Tim Waugh 22cc21 
+        * The access check failed, so cancel the job and send an audit message
Tim Waugh 22cc21 
+        */
Tim Waugh 22cc21 
+        if (AuditLog != -1)
Tim Waugh 75d0e8 
+        {
Tim Waugh 22cc21 
+          audit_message = NULL;
Tim Waugh 22cc21 
+          cupsdSetStringf(&audit_message, "job=%d auid=%u acct=%s obj=%s refused"
Tim Waugh 22cc21 
+                          " unable to access printer=%s", job->id, con->auid,
Tim Waugh 22cc21 
+                          con->username, con->scon, printer->name);
Tim Waugh 22cc21 
+          audit_log_user_message(AuditLog, AUDIT_USER_LABELED_EXPORT, audit_message,
Tim Waugh 22cc21 
+                                 ServerName, NULL, NULL, 0);
Tim Waugh 22cc21 
+          free(audit_message);
Tim Waugh 75d0e8 
+        }
Tim Waugh 22cc21 
+
Tim Waugh 22cc21 
+        send_ipp_status(con, IPP_NOT_AUTHORIZED, _("SELinux prohibits access to the printer"));
Tim Waugh 22cc21 
+        return (NULL);
Tim Waugh 75d0e8 
+      }
Tim Waugh 75d0e8 
+    }
Tim Waugh 75d0e8 
+  }
Tim Waugh 6bb98a 
+  else
Tim Waugh 6bb98a 
+  {
Tim Waugh 6bb98a 
+   /*
Tim Waugh 6bb98a 
+    * Fill in the security context of the job as unlabeled
Tim Waugh 6bb98a 
+    */
Tim Waugh a06301 
+    cupsdLogMessage(CUPSD_LOG_DEBUG, "add_job: setting context of job to %s", UNKNOWN_SL);
Tim Waugh 6bb98a 
+    cupsdSetString(&job->scon, UNKNOWN_SL);
Tim Waugh 6bb98a 
+  }
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
   job->dtype   = dtype;
Tim Waugh 75d0e8 
   job->attrs   = con->request;
Tim Waugh d04237 
   con->request = ippNewRequest(job->attrs->request.op.operation_id);
Tim Waugh f4b662 
@@ -1530,6 +1681,29 @@
Tim Waugh 9ad376 
       attr->values[0].string.text = _cupsStrAlloc(printer->job_sheets[0]);
Tim Waugh 9ad376 
       attr->values[1].string.text = _cupsStrAlloc(printer->job_sheets[1]);
Tim Waugh 9ad376 
     }
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh 9ad376 
+    else
Tim Waugh 9ad376 
+    {
Tim Waugh 9ad376 
+     /*
Tim Waugh 9ad376 
+      * The option was present, so capture the user supplied strings
Tim Waugh 9ad376 
+      */
Tim Waugh 9ad376 
+      userheader = strdup(attr->values[0].string.text);
Tim Waugh 9ad376 
+
Tim Waugh 9ad376 
+      if (attr->num_values > 1)
Tim Waugh 9ad376 
+        userfooter = strdup(attr->values[1].string.text);
Tim Waugh 9ad376 
+
Tim Waugh f6c7a0 
+      if (Classification != NULL && (strcmp(userheader, Classification) == 0)
Tim Waugh d90f39 
+          && userfooter &&(strcmp(userfooter, Classification) == 0))
Tim Waugh 9ad376 
+      {
Tim Waugh 75d0e8 
+       /*
Tim Waugh 9ad376 
+        * Since both values are Classification, the user is not trying to Override
Tim Waugh 75d0e8 
+        */
Tim Waugh 9ad376 
+        free(userheader);
Tim Waugh d90f39 
+        if (userfooter) free(userfooter);
Tim Waugh 9ad376 
+        userheader = userfooter = NULL;
Tim Waugh 9ad376 
+      }
Tim Waugh 9ad376 
+    }
Tim Waugh 9ad376 
+#endif /* WITH_LSPP */
Tim Waugh 9ad376
Tim Waugh 9ad376 
     job->job_sheets = attr;
Tim Waugh 9ad376
Tim Waugh f4b662 
@@ -1560,6 +1734,9 @@
Tim Waugh 9ad376 
 	                		    "job-sheets=\"%s,none\", "
Tim Waugh 9ad376 
 					    "job-originating-user-name=\"%s\"",
Tim Waugh 9ad376 
 	        	 job->id, Classification, job->username);
Tim Waugh 9ad376 
+#ifdef WITH_LSPP
Tim Waugh 9ad376 
+          override = 1;
Tim Waugh 9ad376 
+#endif /* WITH_LSPP */
Tim Waugh 9ad376 
 	}
Tim Waugh 9ad376 
 	else if (attr->num_values == 2 &&
Tim Waugh 9ad376 
 	         strcmp(attr->values[0].string.text,
Tim Waugh f4b662 
@@ -1578,6 +1755,9 @@
Tim Waugh 9ad376 
 					    "job-originating-user-name=\"%s\"",
Tim Waugh 9ad376 
 	        	 job->id, attr->values[0].string.text,
Tim Waugh 9ad376 
 			 attr->values[1].string.text, job->username);
Tim Waugh 9ad376 
+#ifdef WITH_LSPP
Tim Waugh 9ad376 
+          override = 1;
Tim Waugh 9ad376 
+#endif /* WITH_LSPP */
Tim Waugh 9ad376 
 	}
Tim Waugh 9ad376 
 	else if (strcmp(attr->values[0].string.text, Classification) &&
Tim Waugh 9ad376 
 	         strcmp(attr->values[0].string.text, "none") &&
Tim Waugh f4b662 
@@ -1598,6 +1778,9 @@
Tim Waugh 9ad376 
 			    "job-originating-user-name=\"%s\"",
Tim Waugh 9ad376 
 	        	    job->id, attr->values[0].string.text,
Tim Waugh 9ad376 
 			    attr->values[1].string.text, job->username);
Tim Waugh 9ad376 
+#ifdef WITH_LSPP
Tim Waugh 9ad376 
+          override = 1;
Tim Waugh 9ad376 
+#endif /* WITH_LSPP */
Tim Waugh 9ad376 
         }
Tim Waugh 9ad376 
       }
Tim Waugh 9ad376 
       else if (strcmp(attr->values[0].string.text, Classification) &&
Tim Waugh f4b662 
@@ -1638,9 +1821,52 @@
Tim Waugh 9ad376 
 	                  "job-sheets=\"%s\", "
Tim Waugh 9ad376 
 			  "job-originating-user-name=\"%s\"",
Tim Waugh 9ad376 
 	        	 job->id, Classification, job->username);
Tim Waugh 9ad376 
+#ifdef WITH_LSPP
Tim Waugh 9ad376 
+        override = 1;
Tim Waugh 9ad376 
+#endif /* WITH_LSPP */
Tim Waugh ef70a0 
+      }
Tim Waugh 9ad376 
+#ifdef WITH_LSPP
Tim Waugh 9ad376 
+      if (is_lspp_config() && AuditLog != -1)
Tim Waugh 9ad376 
+      {
Tim Waugh 75d0e8 
+        audit_message = NULL;
Tim Waugh 9ad376 
+
Tim Waugh 9ad376 
+        if (userheader || userfooter)
Tim Waugh 9ad376 
+        {
Tim Waugh 9ad376 
+          if (!override)
Tim Waugh 9ad376 
+          {
Tim Waugh 9ad376 
+           /*
Tim Waugh 9ad376 
+            * The user overrode the banner, so audit it
Tim Waugh 9ad376 
+            */
Tim Waugh 22cc21 
+            cupsdSetStringf(&audit_message, "job=%d user supplied job-sheets=%s,%s"
Tim Waugh 22cc21 
+                            " using banners=%s,%s", job->id, userheader,
Tim Waugh 9ad376 
+                            userfooter, attr->values[0].string.text,
Tim Waugh 9ad376 
+                            (attr->num_values > 1) ? attr->values[1].string.text : "(null)");
Tim Waugh 9ad376 
+            audit_log_user_message(AuditLog, AUDIT_LABEL_OVERRIDE, audit_message,
Tim Waugh 9ad376 
+                                   ServerName, NULL, NULL, 1);
Tim Waugh f4b662 
+      }
Tim Waugh 9ad376 
+          else
Tim Waugh 9ad376 
+          {
Tim Waugh 9ad376 
+           /*
Tim Waugh 9ad376 
+            * The user tried to override the banner, audit the failure
Tim Waugh 9ad376 
+            */
Tim Waugh 22cc21 
+            cupsdSetStringf(&audit_message, "job=%d user supplied job-sheets=%s,%s"
Tim Waugh 22cc21 
+                            " ignored banners=%s,%s", job->id, userheader,
Tim Waugh 9ad376 
+                            userfooter, attr->values[0].string.text,
Tim Waugh 9ad376 
+                            (attr->num_values > 1) ? attr->values[1].string.text : "(null)");
Tim Waugh 9ad376 
+            audit_log_user_message(AuditLog, AUDIT_LABEL_OVERRIDE, audit_message,
Tim Waugh 9ad376 
+                                   ServerName, NULL, NULL, 0);
Tim Waugh c5c707 
+      }
Tim Waugh d04237 
+          free(audit_message);
Tim Waugh d04237 
       }
Tim Waugh d04237 
     }
Tim Waugh d04237
Tim Waugh 9ad376 
+      if (userheader)
Tim Waugh 9ad376 
+        free(userheader);
Tim Waugh 9ad376 
+      if (userfooter)
Tim Waugh 9ad376 
+        free(userfooter);
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh d04237 
+    }
Tim Waugh d04237 
+
Tim Waugh 9ad376 
    /*
Tim Waugh d04237 
     * See if we need to add the starting sheet...
Tim Waugh d04237 
     */
Tim Waugh f4b662 
@@ -3142,6 +3368,103 @@
Tim Waugh f4b662 
 }
Tim Waugh f4b662
Tim Waugh f4b662
Tim Waugh f4b662 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+/*
Tim Waugh f4b662 
+ * 'check_context()' - Check SELinux security context of a user and job
Tim Waugh f4b662 
+ */
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+static int				/* O - 1 if OK, 0 if not, -1 on error */
Tim Waugh f4b662 
+check_context(cupsd_client_t *con,	/* I - Client connection */
Tim Waugh f4b662 
+             cupsd_job_t    *job)	/* I - Job */
Tim Waugh f4b662 
+{
Tim Waugh f4b662 
+  int			enforcing;	/* is SELinux in enforcing mode */
Tim Waugh f4b662 
+  char			filename[1024]; /* Filename of the spool file */
Tim Waugh f4b662 
+  security_id_t		clisid;		/* SELinux SID of the client */
Tim Waugh f4b662 
+  security_id_t		jobsid;		/* SELinux SID of the job */
Tim Waugh f4b662 
+  security_id_t		filesid;	/* SELinux SID of the spool file */
Tim Waugh f4b662 
+  struct avc_entry_ref	avcref;		/* AVC entry cache pointer */
Tim Waugh f4b662 
+  security_class_t	tclass;		/* SELinux security class */
Tim Waugh f4b662 
+  access_vector_t	avr;		/* SELinux access being queried */
Tim Waugh f4b662 
+  security_context_t	spoolfilecon;	/* SELinux context of the spool file */
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+ /*
Tim Waugh f4b662 
+  * Validate the input to be sure there are contexts to work with...
Tim Waugh f4b662 
+  */
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+  if (con->scon == NULL || job->scon == NULL
Tim Waugh f4b662 
+      || strncmp(con->scon, UNKNOWN_SL, strlen(UNKNOWN_SL)) == 0
Tim Waugh f4b662 
+      || strncmp(job->scon, UNKNOWN_SL, strlen(UNKNOWN_SL)) == 0)
Tim Waugh f4b662 
+    return -1;
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+  if ((enforcing = security_getenforce()) == -1)
Tim Waugh f4b662 
+  {
Tim Waugh f4b662 
+    cupsdLogMessage(CUPSD_LOG_ERROR, "Error while determining SELinux enforcement");
Tim Waugh f4b662 
+    return -1;
Tim Waugh f4b662 
+  }
Tim Waugh f4b662 
+  cupsdLogMessage(CUPSD_LOG_DEBUG, "check_context: client context %s job context %s", con->scon, job->scon);
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+ /*
Tim Waugh f4b662 
+  * Initialize the avc engine...
Tim Waugh f4b662 
+  */
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+  if (avc_init("cupsd", NULL, NULL, NULL, NULL) < 0)
Tim Waugh f4b662 
+  {
Tim Waugh f4b662 
+    cupsdLogMessage(CUPSD_LOG_ERROR, "check_context: unable avc_init");
Tim Waugh f4b662 
+    return -1;
Tim Waugh f4b662 
+  }
Tim Waugh f4b662 
+  if (avc_context_to_sid(con->scon, &clisid) != 0)
Tim Waugh f4b662 
+  {
Tim Waugh f4b662 
+    cupsdLogMessage(CUPSD_LOG_ERROR, "check_context: unable to convert %s to SELinux sid", con->scon);
Tim Waugh f4b662 
+    return -1;
Tim Waugh f4b662 
+  }
Tim Waugh f4b662 
+  avc_context_to_sid(job->scon, &jobsid);
Tim Waugh f4b662 
+  avc_entry_ref_init(&avcref);
Tim Waugh f4b662 
+  tclass = SECCLASS_FILE;
Tim Waugh f4b662 
+  avr = FILE__READ;
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+ /*
Tim Waugh f4b662 
+  * Perform the check with the client as the subject, first with the job as the object
Tim Waugh f4b662 
+  *   if that fails then with the spool file as the object...
Tim Waugh f4b662 
+  */
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+  if (avc_has_perm_noaudit(clisid, jobsid, tclass, avr, &avcref, NULL) != 0)
Tim Waugh f4b662 
+  {
Tim Waugh f4b662 
+    cupsdLogMessage(CUPSD_LOG_INFO, "check_context: SELinux denied access based on the client context");
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+    snprintf(filename, sizeof(filename), "%s/c%05d", RequestRoot, job->id);
Tim Waugh f4b662 
+    if (getfilecon(filename, &spoolfilecon) == -1)
Tim Waugh f4b662 
+    {
Tim Waugh f4b662 
+      cupsdLogMessage(CUPSD_LOG_ERROR, "check_context: Unable to get spoolfile context");
Tim Waugh f4b662 
+      return -1;
Tim Waugh f4b662 
+    }
Tim Waugh f4b662 
+    if (avc_context_to_sid(spoolfilecon, &filesid) != 0)
Tim Waugh f4b662 
+    {
Tim Waugh f4b662 
+      cupsdLogMessage(CUPSD_LOG_ERROR, "check_context: Unable to determine the SELinux sid for the spool file");
Tim Waugh f4b662 
+      freecon(spoolfilecon);
Tim Waugh f4b662 
+      return -1;
Tim Waugh f4b662 
+    }
Tim Waugh f4b662 
+    freecon(spoolfilecon);
Tim Waugh f4b662 
+    if (avc_has_perm_noaudit(clisid, filesid, tclass, avr, &avcref, NULL) != 0)
Tim Waugh f4b662 
+    {
Tim Waugh f4b662 
+      cupsdLogMessage(CUPSD_LOG_INFO, "check_context: SELinux denied access to the spool file");
Tim Waugh f4b662 
+      return 0;
Tim Waugh f4b662 
+    }
Tim Waugh f4b662 
+    cupsdLogMessage(CUPSD_LOG_INFO, "check_context: SELinux allowed access to the spool file");
Tim Waugh f4b662 
+    return 1;
Tim Waugh f4b662 
+  }
Tim Waugh f4b662 
+  else
Tim Waugh f4b662 
+    if (enforcing == 0)
Tim Waugh f4b662 
+        cupsdLogMessage(CUPSD_LOG_INFO, "check_context: allowing operation due to permissive mode");
Tim Waugh f4b662 
+    else
Tim Waugh f4b662 
+        cupsdLogMessage(CUPSD_LOG_INFO, "check_context: SELinux allowed access based on the client context");
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+  return 1;
Tim Waugh f4b662 
+}
Tim Waugh f4b662 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+
Tim Waugh f4b662 
 /*
Tim Waugh f4b662 
  * 'check_quotas()' - Check quotas for a printer and user.
Tim Waugh f4b662 
  */
Tim Waugh f4b662 
@@ -3490,6 +3813,15 @@
Tim Waugh 75d0e8 
   char		attrname[255],		/* Name of attribute */
Tim Waugh 75d0e8 
 		*s;			/* Pointer into name */
Tim Waugh 75d0e8 
   ipp_attribute_t *attr;		/* Attribute */
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh ef70a0 
+  const char	*mls_label;		/* SL of print job */
Tim Waugh ef70a0 
+  char		*jobrange;		/* SELinux sensitivity range */
Tim Waugh ef70a0 
+  char		*jobclearance;		/* SELinux low end clearance */
Tim Waugh 22cc21 
+  context_t	jobcon;			/* SELinux context of the job */
Tim Waugh 22cc21 
+  context_t	tmpcon;			/* Temp context to set the level */
Tim Waugh 22cc21 
+  security_context_t	spoolcon;	/* Context of the file in the spool */
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
   cupsdLogMessage(CUPSD_LOG_DEBUG2, "copy_banner(%p[%d], %p[%d], %s)",
Tim Waugh f4b662 
@@ -3523,6 +3855,77 @@
Tim Waugh 22cc21
Tim Waugh 22cc21 
   fchmod(cupsFileNumber(out), 0640);
Tim Waugh 22cc21 
   fchown(cupsFileNumber(out), RunUser, Group);
Tim Waugh 22cc21 
+#ifdef WITH_LSPP
Tim Waugh 6bb98a 
+  if (strncmp(con->scon, UNKNOWN_SL, strlen(UNKNOWN_SL)) != 0)
Tim Waugh 22cc21 
+  {
Tim Waugh 6bb98a 
+    if (getfilecon(filename, &spoolcon) == -1)
Tim Waugh 6bb98a 
+    {
Tim Waugh 6bb98a 
+      cupsdLogMessage(CUPSD_LOG_ERROR,
Tim Waugh 6bb98a 
+                      "copy_banner: Unable to get the context of the banner file %s - %s",
Tim Waugh 6bb98a 
+                      filename, strerror(errno));
Tim Waugh 6bb98a 
+      job->num_files --;
Tim Waugh 6bb98a 
+      return (0);
Tim Waugh 6bb98a 
+    }
Tim Waugh 6bb98a 
+    tmpcon = context_new(spoolcon);
Tim Waugh 6bb98a 
+    jobcon = context_new(con->scon);
Tim Waugh 6bb98a 
+    freecon(spoolcon);
Tim Waugh c5c707 
+    if (!tmpcon || !jobcon)
Tim Waugh c5c707 
+    {
Tim Waugh c5c707 
+      if (tmpcon)
Tim Waugh c5c707 
+        context_free(tmpcon);
Tim Waugh c5c707 
+      if (jobcon)
Tim Waugh c5c707 
+        context_free(jobcon);
Tim Waugh c5c707 
+      cupsdLogMessage(CUPSD_LOG_ERROR,
Tim Waugh c5c707 
+                      "copy_banner: Unable to get the SELinux contexts");
Tim Waugh c5c707 
+      job->num_files --;
Tim Waugh c5c707 
+      return (0);
Tim Waugh c5c707 
+    }
Tim Waugh ef70a0 
+    jobrange = strdup(context_range_get(jobcon));
Tim Waugh ef70a0 
+    if ((jobclearance = strtok(jobrange, "-")) != NULL)
Tim Waugh 6bb98a 
+    {
Tim Waugh ef70a0 
+      if (context_range_set(tmpcon, jobclearance) == -1)
Tim Waugh ef70a0 
+      {
Tim Waugh ef70a0 
+        cupsdLogMessage(CUPSD_LOG_ERROR,
Tim Waugh ef70a0 
+                        "copy_banner: Unable to set the level of the context for file %s - %s",
Tim Waugh ef70a0 
+                        filename, strerror(errno));
Tim Waugh ef70a0 
+        free(jobrange);
Tim Waugh ef70a0 
+        context_free(jobcon);
Tim Waugh ef70a0 
+        context_free(tmpcon);
Tim Waugh ef70a0 
+        job->num_files --;
Tim Waugh ef70a0 
+        return (0);
Tim Waugh ef70a0 
+      }
Tim Waugh ef70a0 
+    }
Tim Waugh ef70a0 
+    else
Tim Waugh ef70a0 
+    {
Tim Waugh ef70a0 
+      if (context_range_set(tmpcon, (context_range_get(jobcon))) == -1)
Tim Waugh ef70a0 
+      {
Tim Waugh ef70a0 
+        cupsdLogMessage(CUPSD_LOG_ERROR,
Tim Waugh ef70a0 
+                        "copy_banner: Unable to set the level of the context for file %s - %s",
Tim Waugh ef70a0 
+                        filename, strerror(errno));
Tim Waugh ef70a0 
+        free(jobrange);
Tim Waugh ef70a0 
+        context_free(jobcon);
Tim Waugh ef70a0 
+        context_free(tmpcon);
Tim Waugh ef70a0 
+        job->num_files --;
Tim Waugh ef70a0 
+        return (0);
Tim Waugh ef70a0 
+      }
Tim Waugh 6bb98a 
+    }
Tim Waugh ef70a0 
+    free(jobrange);
Tim Waugh 6bb98a 
+    if (setfilecon(filename, context_str(tmpcon)) == -1)
Tim Waugh 6bb98a 
+    {
Tim Waugh 6bb98a 
+      cupsdLogMessage(CUPSD_LOG_ERROR,
Tim Waugh 6bb98a 
+                      "copy_banner: Unable to set the context of the banner file %s - %s",
Tim Waugh 6bb98a 
+                      filename, strerror(errno));
Tim Waugh 6bb98a 
+      context_free(jobcon);
Tim Waugh 6bb98a 
+      context_free(tmpcon);
Tim Waugh 6bb98a 
+      job->num_files --;
Tim Waugh 6bb98a 
+      return (0);
Tim Waugh 6bb98a 
+    }
Tim Waugh 6bb98a 
+    cupsdLogMessage(CUPSD_LOG_DEBUG2, "copy_banner: %s set to %s",
Tim Waugh 6bb98a 
+                    filename, context_str(tmpcon));
Tim Waugh 22cc21 
+    context_free(jobcon);
Tim Waugh 22cc21 
+    context_free(tmpcon);
Tim Waugh 22cc21 
+  }
Tim Waugh 22cc21 
+#endif /* WITH_LSPP */
Tim Waugh 22cc21
Tim Waugh 22cc21 
  /*
Tim Waugh 22cc21 
   * Try the localized banner file under the subdirectory...
Tim Waugh f4b662 
@@ -3617,6 +4020,24 @@
Tim Waugh 75d0e8 
       else
Tim Waugh 75d0e8 
         s = attrname;
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh 75d0e8 
+      if (strcmp(s, "mls-label") == 0)
Tim Waugh 75d0e8 
+      {
Tim Waugh 6bb98a 
+        if (con->scon != NULL && strncmp(con->scon, UNKNOWN_SL, strlen(UNKNOWN_SL)) != 0)
Tim Waugh 75d0e8 
+        {
Tim Waugh 22cc21 
+          jobcon = context_new(con->scon);
Tim Waugh 75d0e8 
+          if (strcasecmp(name, MLS_CONFIG) == 0)
Tim Waugh 22cc21 
+            mls_label = context_range_get(jobcon);
Tim Waugh 75d0e8 
+          else if (strcasecmp(name, TE_CONFIG) == 0)
Tim Waugh 22cc21 
+            mls_label = context_type_get(jobcon);
Tim Waugh 75d0e8 
+          else // default to using the whole context string
Tim Waugh 22cc21 
+            mls_label = context_str(jobcon);
Tim Waugh 75d0e8 
+          cupsFilePuts(out, mls_label);
Tim Waugh 22cc21 
+          context_free(jobcon);
Tim Waugh 75d0e8 
+        }
Tim Waugh 75d0e8 
+        continue;
Tim Waugh 75d0e8 
+      }
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8 
       if (!strcmp(s, "printer-name"))
Tim Waugh 75d0e8 
       {
Tim Waugh 75d0e8 
         cupsFilePuts(out, job->dest);
Tim Waugh f4b662 
@@ -5295,6 +5716,22 @@
Tim Waugh f4b662 
     return;
Tim Waugh f4b662 
   }
Tim Waugh 75d0e8
Tim Waugh f4b662 
+
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh 75d0e8 
+ /*
Tim Waugh f4b662 
+  * Check SELinux...
Tim Waugh 75d0e8 
+  */
Tim Waugh f4b662 
+  if (is_lspp_config() && check_context(con, job) != 1)
Tim Waugh 75d0e8 
+  {
Tim Waugh f4b662 
+   /*
Tim Waugh f4b662 
+    * Unfortunately we have to lie to the user...
Tim Waugh f4b662 
+    */
Tim Waugh f4b662 
+    send_ipp_status(con, IPP_NOT_FOUND, _("Job #%d does not exist!"), jobid);
Tim Waugh f4b662 
+    return;
Tim Waugh 75d0e8 
+  }
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
  /*
Tim Waugh f4b662 
   * Copy attributes...
Tim Waugh 75d0e8 
   */
Tim Waugh f4b662 
@@ -5492,6 +5929,11 @@
Tim Waugh 75d0e8 
     if (count > 0)
Tim Waugh 75d0e8 
       ippAddSeparator(con->response);
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+    if (is_lspp_config() && check_context(con, job) != 1)
Tim Waugh f4b662 
+      continue;
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8 
+
Tim Waugh 75d0e8 
     count ++;
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
     cupsdLogMessage(CUPSD_LOG_DEBUG2, "get_jobs: count = %d", count);
Tim Waugh f4b662 
@@ -7880,12 +8322,22 @@
Tim Waugh 75d0e8 
     * See if we need to add the ending sheet...
Tim Waugh 75d0e8 
     */
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh 75d0e8 
+    if (printer &&
Tim Waugh 75d0e8 
+        ( is_lspp_config() ||
Tim Waugh 75d0e8 
+        !(printer->type & (CUPS_PRINTER_REMOTE | CUPS_PRINTER_IMPLICIT)) ) &&
Tim Waugh 75d0e8 
+        (attr = ippFindAttribute(job->attrs, "job-sheets",
Tim Waugh 75d0e8 
+	                         IPP_TAG_ZERO)) != NULL &&
Tim Waugh 75d0e8 
+        attr->num_values > 1)
Tim Waugh 75d0e8 
+    {
Tim Waugh 75d0e8 
+#else /* !WITH_LSPP */
Tim Waugh 75d0e8 
     if (printer &&
Tim Waugh 75d0e8 
         !(printer->type & (CUPS_PRINTER_REMOTE | CUPS_PRINTER_IMPLICIT)) &&
Tim Waugh 75d0e8 
         (attr = ippFindAttribute(job->attrs, "job-sheets",
Tim Waugh 75d0e8 
 	                         IPP_TAG_ZERO)) != NULL &&
Tim Waugh 75d0e8 
         attr->num_values > 1)
Tim Waugh 75d0e8 
     {
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8 
      /*
Tim Waugh 75d0e8 
       * Yes...
Tim Waugh 75d0e8 
       */
Tim Waugh f4b662 
@@ -9158,6 +9610,11 @@
Tim Waugh 22cc21
Tim Waugh 22cc21 
   strlcpy(username, get_username(con), userlen);
Tim Waugh 22cc21
Tim Waugh 22cc21 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  if (is_lspp_config() && check_context(con, job) != 1)
Tim Waugh f4b662 
+    return 0;
Tim Waugh 22cc21 
+#endif /* WITH_LSPP */
Tim Waugh 22cc21 
+
Tim Waugh 22cc21 
  /*
Tim Waugh 22cc21 
   * Check the username against the owner...
Tim Waugh 22cc21 
   */
Tim Waugh ee6b34 
--- cups-1.2.8/scheduler/job.c	2007-03-02 14:06:43.000000000 +0000
Tim Waugh ee6b34 
+++ cups-1.2.4-secheck/scheduler/job.c	2007-03-07 11:22:58.000000000 -0500
Tim Waugh f4b662 
@@ -68,6 +68,9 @@
Tim Waugh f4b662 
  *   unload_job()               - Unload a job from memory.
Tim Waugh 75d0e8 
  */
Tim Waugh 75d0e8
Tim Waugh f4b662 
+/* Copyright (C) 2005 Trusted Computer Solutions, Inc. */
Tim Waugh f4b662 
+/* (c) Copyright 2005-2006 Hewlett-Packard Development Company, L.P. */
Tim Waugh f4b662 
+
Tim Waugh 75d0e8 
 /*
Tim Waugh f4b662 
  * Include necessary headers...
Tim Waugh f4b662 
  */
Tim Waugh f4b662 
@@ -77,6 +80,14 @@
Tim Waugh f4b662 
 #include <cups/backend.h>
Tim Waugh f4b662 
 #include <cups/dir.h>
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+#include <libaudit.h>
Tim Waugh f4b662 
+#include <selinux/selinux.h>
Tim Waugh f4b662 
+#include <selinux/context.h>
Tim Waugh f4b662 
+#include <selinux/avc.h>
Tim Waugh f4b662 
+#include <selinux/flask.h>
Tim Waugh f4b662 
+#include <selinux/av_permissions.h>
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
 /*
Tim Waugh f4b662 
  * Local globals...
Tim Waugh f4b662 
@@ -1030,6 +1041,23 @@
Tim Waugh f4b662 
     cupsdSetString(&job->dest, dest);
Tim Waugh f4b662 
   }
Tim Waugh f4b662
Tim Waugh 22cc21 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  if ((attr = ippFindAttribute(job->attrs, "security-context", IPP_TAG_NAME)) != NULL)
Tim Waugh f4b662 
+    cupsdSetString(&job->scon, attr->values[0].string.text);
Tim Waugh f4b662 
+  else if (is_lspp_config())
Tim Waugh f4b662 
+  {
Tim Waugh f4b662 
+   /*
Tim Waugh f4b662 
+    * There was no security context so delete the job
Tim Waugh f4b662 
+    */
Tim Waugh f4b662 
+    cupsdLogMessage(CUPSD_LOG_ERROR, "LoadAllJobs: Missing or bad security-context attribute in control file \"%s\"!",
Tim Waugh f4b662 
+                    jobfile);
Tim Waugh f4b662 
+    ippDelete(job->attrs);
Tim Waugh f4b662 
+    job->attrs = NULL;
Tim Waugh f4b662 
+    unlink(jobfile);
Tim Waugh f4b662 
+    return;
Tim Waugh f4b662 
+  }
Tim Waugh 22cc21 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
+
Tim Waugh f4b662 
   job->sheets     = ippFindAttribute(job->attrs, "job-media-sheets-completed",
Tim Waugh f4b662 
                                      IPP_TAG_INTEGER);
Tim Waugh f4b662 
   job->job_sheets = ippFindAttribute(job->attrs, "job-sheets", IPP_TAG_NAME);
Tim Waugh f4b662 
@@ -1339,6 +1367,13 @@
Tim Waugh f4b662 
 {
Tim Waugh f4b662 
   char		filename[1024];		/* Job control filename */
Tim Waugh f4b662 
   cups_file_t	*fp;			/* Job file */
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  security_context_t	spoolcon;	/* context of the job control file */
Tim Waugh f4b662 
+  context_t		jobcon;		/* contex_t container for job->scon */
Tim Waugh f4b662 
+  context_t		tmpcon;		/* Temp context to swap the level */
Tim Waugh f4b662 
+  char		*jobclearance;		/* SELinux low end clearance */
Tim Waugh f4b662 
+  char		*jobrange;		/* SELinux sensitivity range */
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8
Tim Waugh 75d0e8
Tim Waugh f4b662 
   cupsdLogMessage(CUPSD_LOG_DEBUG2, "cupsdSaveJob(job=%p(%d)): job->attrs=%p",
Tim Waugh f4b662 
@@ -1357,6 +1392,72 @@
Tim Waugh f4b662 
   fchmod(cupsFileNumber(fp), 0600);
Tim Waugh f4b662 
   fchown(cupsFileNumber(fp), RunUser, Group);
Tim Waugh 75d0e8
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  if (job->scon && strncmp(job->scon, UNKNOWN_SL, strlen(UNKNOWN_SL)) != 0)
Tim Waugh d04237 
+  {
Tim Waugh f4b662 
+    if (getfilecon(filename, &spoolcon) == -1)
Tim Waugh 5dd986 
+    {
Tim Waugh f4b662 
+      cupsdLogMessage(CUPSD_LOG_ERROR,
Tim Waugh f4b662 
+                      "Unable to get context of job control file \"%s\" - %s.",
Tim Waugh f4b662 
+                      filename, strerror(errno));
Tim Waugh f4b662 
+      return;
Tim Waugh 5dd986 
+    }
Tim Waugh f4b662 
+    jobcon = context_new(job->scon);
Tim Waugh f4b662 
+    tmpcon = context_new(spoolcon);
Tim Waugh f4b662 
+    freecon(spoolcon);
Tim Waugh f4b662 
+    if (!jobcon || !tmpcon)
Tim Waugh f4b662 
+    {
Tim Waugh f4b662 
+      if (jobcon)
Tim Waugh f4b662 
+        context_free(jobcon);
Tim Waugh f4b662 
+      if (tmpcon)
Tim Waugh f4b662 
+        context_free(tmpcon);
Tim Waugh f4b662 
+      cupsdLogMessage(CUPSD_LOG_ERROR, "Unable to get SELinux contexts");
Tim Waugh f4b662 
+      return;
Tim Waugh f4b662 
+    }
Tim Waugh f4b662 
+    jobrange = strdup(context_range_get(jobcon));
Tim Waugh f4b662 
+    if ((jobclearance = strtok(jobrange, "-")) != NULL)
Tim Waugh f4b662 
+    {
Tim Waugh f4b662 
+      if (context_range_set(tmpcon, jobclearance) == -1)
Tim Waugh f4b662 
+      {
Tim Waugh f4b662 
+        cupsdLogMessage(CUPSD_LOG_ERROR,
Tim Waugh f4b662 
+                        "Unable to set the range for job control file \"%s\" - %s.",
Tim Waugh f4b662 
+                        filename, strerror(errno));
Tim Waugh f4b662 
+        free(jobrange);
Tim Waugh f4b662 
+        context_free(tmpcon);
Tim Waugh f4b662 
+        context_free(jobcon);
Tim Waugh f4b662 
+        return;
Tim Waugh f4b662 
+      }
Tim Waugh f4b662 
+    }
Tim Waugh f4b662 
+    else
Tim Waugh f4b662 
+    {
Tim Waugh f4b662 
+      if (context_range_set(tmpcon, (context_range_get(jobcon))) == -1)
Tim Waugh f4b662 
+      {
Tim Waugh f4b662 
+        cupsdLogMessage(CUPSD_LOG_ERROR,
Tim Waugh f4b662 
+                        "Unable to set the range for job control file \"%s\" - %s.",
Tim Waugh f4b662 
+                        filename, strerror(errno));
Tim Waugh f4b662 
+        free(jobrange);
Tim Waugh f4b662 
+        context_free(tmpcon);
Tim Waugh f4b662 
+        context_free(jobcon);
Tim Waugh f4b662 
+        return;
Tim Waugh f4b662 
+      }
Tim Waugh f4b662 
+    }
Tim Waugh f4b662 
+    free(jobrange);
Tim Waugh f4b662 
+    if (setfilecon(filename, context_str(tmpcon)) == -1)
Tim Waugh f4b662 
+    {
Tim Waugh f4b662 
+      cupsdLogMessage(CUPSD_LOG_ERROR,
Tim Waugh f4b662 
+                      "Unable to set context of job control file \"%s\" - %s.",
Tim Waugh f4b662 
+                      filename, strerror(errno));
Tim Waugh f4b662 
+      context_free(tmpcon);
Tim Waugh f4b662 
+      context_free(jobcon);
Tim Waugh f4b662 
+      return;
Tim Waugh f4b662 
+    }
Tim Waugh f4b662 
+    cupsdLogMessage(CUPSD_LOG_DEBUG2, "cupsdSaveJob(job=%p): new spool file context=%s",
Tim Waugh f4b662 
+                    job, context_str(tmpcon));
Tim Waugh f4b662 
+    context_free(tmpcon);
Tim Waugh f4b662 
+    context_free(jobcon);
Tim Waugh d04237 
+  }
Tim Waugh 5dd986 
+#endif /* WITH_LSPP */
Tim Waugh 5dd986 
+
Tim Waugh f4b662 
   job->attrs->state = IPP_IDLE;
Tim Waugh d04237
Tim Waugh f4b662 
   if (ippWriteIO(fp, (ipp_iocb_t)cupsFileWrite, 1, NULL,
Tim Waugh f4b662 
@@ -2486,6 +2587,21 @@
Tim Waugh f4b662 
 					/* RIP_MAX_CACHE env variable */
Tim Waugh f4b662 
   static char		*options = NULL;/* Full list of options */
Tim Waugh f4b662 
   static int		optlength = 0;	/* Length of option buffer */
Tim Waugh d04237 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  const char		*mls_label = NULL;	/* SL to put in classification env var */
Tim Waugh f4b662 
+  char			*label_template = NULL;	/* SL to put in classification env var */
Tim Waugh f4b662 
+  char			*audit_message = NULL;	/* Audit message string */
Tim Waugh f4b662 
+  char			*printerfile = NULL;	/* Device file pointed to by the printer */
Tim Waugh f4b662 
+  context_t		jobcon;		/* SELinux context of the job */
Tim Waugh f4b662 
+  security_id_t		clisid;		/* SELinux SID for the client */
Tim Waugh f4b662 
+  security_id_t		psid;		/* SELinux SID for the printer */
Tim Waugh f4b662 
+  context_t		printercon;	/* Printer's context string */
Tim Waugh f4b662 
+  struct stat		printerstat;	/* Printer's stat buffer */
Tim Waugh f4b662 
+  security_context_t	devcon;		/* Printer's SELinux context */
Tim Waugh f4b662 
+  struct avc_entry_ref	avcref;		/* Pointer to the access vector cache */
Tim Waugh f4b662 
+  security_class_t	tclass;		/* Object class for the SELinux check */
Tim Waugh f4b662 
+  access_vector_t	avr;		/* Access method being requested */
Tim Waugh d04237 
+#endif /* WITH_LSPP */
Tim Waugh d04237
Tim Waugh d04237
Tim Waugh f4b662 
   cupsdLogMessage(CUPSD_LOG_DEBUG2, "start_job: id = %d, file = %d/%d",
Tim Waugh f4b662 
@@ -2745,6 +2861,106 @@
Tim Waugh d04237
Tim Waugh f4b662 
   cupsdLogMessage(CUPSD_LOG_DEBUG, "banner_page = %d", banner_page);
Tim Waugh 5dd986
Tim Waugh 5dd986 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  if (is_lspp_config())
Tim Waugh f4b662 
+  {
Tim Waugh f4b662 
+   /*
Tim Waugh f4b662 
+    * Perform an access check before printing, but only if the printer starts with /dev/
Tim Waugh f4b662 
+    */
Tim Waugh f4b662 
+    printerfile = strstr(printer->device_uri, "/dev/");
Tim Waugh f4b662 
+    if (printerfile == NULL && (strncmp(printer->device_uri, "file:/", 6) == 0))
Tim Waugh f4b662 
+      printerfile = strdup(printer->device_uri + strlen("file:/"));
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+    if (printerfile != NULL)
Tim Waugh f4b662 
+    {
Tim Waugh f4b662 
+      cupsdLogMessage(CUPSD_LOG_DEBUG,
Tim Waugh f4b662 
+                      "StartJob: Attempting to check access on printer device %s", printerfile);
Tim Waugh f4b662 
+      if (lstat(printerfile, &printerstat) < 0)
Tim Waugh f4b662 
+      {
Tim Waugh f4b662 
+	if (errno != ENOENT)
Tim Waugh f4b662 
+	{
Tim Waugh f4b662 
+	  cupsdLogMessage(CUPSD_LOG_ERROR, "StartJob: Unable to stat the printer");
Tim Waugh f4b662 
+	  cupsdCancelJob(job, 0, IPP_JOB_ABORTED);
Tim Waugh f4b662 
+	  return ;
Tim Waugh f4b662 
+	}
Tim Waugh f4b662 
+	/*
Tim Waugh f4b662 
+	 * The printer does not exist, so for now assume it's a FileDevice
Tim Waugh f4b662 
+	 */
Tim Waugh f4b662 
+	tclass = SECCLASS_FILE;
Tim Waugh f4b662 
+	avr = FILE__WRITE;
Tim Waugh f4b662 
+      }
Tim Waugh f4b662 
+      else if (S_ISCHR(printerstat.st_mode))
Tim Waugh f4b662 
+      {
Tim Waugh f4b662 
+	tclass = SECCLASS_CHR_FILE;
Tim Waugh f4b662 
+	avr = CHR_FILE__WRITE;
Tim Waugh f4b662 
+      }
Tim Waugh f4b662 
+      else if (S_ISREG(printerstat.st_mode))
Tim Waugh f4b662 
+      {
Tim Waugh f4b662 
+	tclass = SECCLASS_FILE;
Tim Waugh f4b662 
+	avr = FILE__WRITE;
Tim Waugh f4b662 
+      }
Tim Waugh f4b662 
+      else
Tim Waugh f4b662 
+      {
Tim Waugh f4b662 
+	cupsdLogMessage(CUPSD_LOG_ERROR,
Tim Waugh f4b662 
+			"StartJob: Printer is not a character device or regular file");
Tim Waugh f4b662 
+	cupsdCancelJob(job, 0, IPP_JOB_ABORTED);
Tim Waugh f4b662 
+	return ;
Tim Waugh f4b662 
+      }
Tim Waugh f4b662 
+      avc_init("cupsd_dequeue_", NULL, NULL, NULL, NULL);
Tim Waugh f4b662 
+      avc_entry_ref_init(&avcref);
Tim Waugh f4b662 
+      if (avc_context_to_sid(job->scon, &clisid) != 0)
Tim Waugh f4b662 
+      {
Tim Waugh f4b662 
+        cupsdLogMessage(CUPSD_LOG_ERROR,
Tim Waugh f4b662 
+                        "StartJob: Unable to determine the SELinux sid for the job");
Tim Waugh f4b662 
+        cupsdCancelJob(job, 0, IPP_JOB_ABORTED);
Tim Waugh f4b662 
+        return ;
Tim Waugh f4b662 
+      }
Tim Waugh f4b662 
+      if (getfilecon(printerfile, &devcon) == -1)
Tim Waugh f4b662 
+      {
Tim Waugh f4b662 
+        cupsdLogMessage(CUPSD_LOG_ERROR, "StartJob: Unable to get the SELinux context of %s",
Tim Waugh f4b662 
+                        printerfile);
Tim Waugh f4b662 
+        cupsdCancelJob(job, 0, IPP_JOB_ABORTED);
Tim Waugh f4b662 
+        return ;
Tim Waugh f4b662 
+      }
Tim Waugh f4b662 
+      printercon = context_new(devcon);
Tim Waugh f4b662 
+      cupsdLogMessage(CUPSD_LOG_DEBUG, "StartJob: printer context %s client context %s",
Tim Waugh f4b662 
+                      context_str(printercon), job->scon);
Tim Waugh f4b662 
+      context_free(printercon);
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+      if (avc_context_to_sid(devcon, &psid) != 0)
Tim Waugh f4b662 
+      {
Tim Waugh f4b662 
+        cupsdLogMessage(CUPSD_LOG_ERROR,
Tim Waugh f4b662 
+                        "StartJob: Unable to determine the SELinux sid for the printer");
Tim Waugh f4b662 
+        freecon(devcon);
Tim Waugh f4b662 
+        cupsdCancelJob(job, 0, IPP_JOB_ABORTED);
Tim Waugh f4b662 
+        return ;
Tim Waugh f4b662 
+      }
Tim Waugh f4b662 
+      freecon(devcon);
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+      if (avc_has_perm(clisid, psid, tclass, avr, &avcref, NULL) != 0)
Tim Waugh f4b662 
+      {
Tim Waugh f4b662 
+       /*
Tim Waugh f4b662 
+        * The access check failed, so cancel the job and send an audit message
Tim Waugh f4b662 
+        */
Tim Waugh f4b662 
+        if (AuditLog != -1)
Tim Waugh f4b662 
+        {
Tim Waugh f4b662 
+          audit_message = NULL;
Tim Waugh f4b662 
+          cupsdSetStringf(&audit_message, "job=%d auid=%u acct=%s obj=%s canceled"
Tim Waugh f4b662 
+                                          " unable to access printer=%s", job->id,
Tim Waugh f4b662 
+                          job->auid, (job->username)?job->username:"?", job->scon, printer->name);
Tim Waugh f4b662 
+          audit_log_user_message(AuditLog, AUDIT_USER_LABELED_EXPORT, audit_message,
Tim Waugh f4b662 
+                                 ServerName, NULL, NULL, 0);
Tim Waugh f4b662 
+          free(audit_message);
Tim Waugh f4b662 
+        }
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+        cupsdCancelJob(job, 0, IPP_JOB_ABORTED);
Tim Waugh f4b662 
+
Tim Waugh f4b662 
+        return ;
Tim Waugh f4b662 
+      }
Tim Waugh f4b662 
+    }
Tim Waugh f4b662 
+  }
Tim Waugh 5dd986 
+#endif /* WITH_LSPP */
Tim Waugh d04237 
+
Tim Waugh f4b662 
  /*
Tim Waugh f4b662 
   * Building the options string is harder than it needs to be, but
Tim Waugh f4b662 
   * for the moment we need to pass strings for command-line args and
Tim Waugh ee6b34 
@@ -2840,6 +3056,18 @@
Tim Waugh ee6b34 
          banner_page)
Tim Waugh ee6b34 
         continue;
Tim Waugh 5dd986
Tim Waugh 5dd986 
+#ifdef WITH_LSPP
Tim Waugh ee6b34 
+     /*
Tim Waugh ee6b34 
+      * In LSPP mode refuse to honor the page-label
Tim Waugh ee6b34 
+      */
Tim Waugh ee6b34 
+      if (is_lspp_config() &&
Tim Waugh ee6b34 
+          !strcmp(attr->name, "page-label"))
Tim Waugh ee6b34 
+      {
Tim Waugh ee6b34 
+        cupsdLogMessage(CUPSD_LOG_DEBUG, "Ignoring page-label option due to LSPP mode");
Tim Waugh ee6b34 
+        continue;
Tim Waugh ee6b34 
+      }
Tim Waugh ee6b34 
+#endif /* WITH_LSPP */
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
      /*
Tim Waugh ee6b34 
       * Otherwise add them to the list...
Tim Waugh ee6b34 
       */
Tim Waugh ee6b34 
@@ -3055,6 +3283,67 @@
Tim Waugh ee6b34 
     envp[envc ++] = final_content_type;
Tim Waugh ee6b34 
   }
Tim Waugh ee6b34
Tim Waugh ee6b34 
+#ifdef WITH_LSPP
Tim Waugh ee6b34 
+  if (is_lspp_config())
Tim Waugh ee6b34 
+  {
Tim Waugh ee6b34 
+    if (!job->scon || strncmp(job->scon, UNKNOWN_SL, strlen(UNKNOWN_SL)) == 0)
Tim Waugh d04237 
+    {
Tim Waugh ee6b34 
+      if (AuditLog != -1)
Tim Waugh 9ad376 
+      {
Tim Waugh ee6b34 
+        audit_message = NULL;
Tim Waugh ee6b34 
+        cupsdSetStringf(&audit_message, "job=%d auid=%u acct=%s printer=%s title=%s",
Tim Waugh ee6b34 
+                        job->id, job->auid, job->username, printer->name, title);
Tim Waugh ee6b34 
+        audit_log_user_message(AuditLog, AUDIT_USER_UNLABELED_EXPORT, audit_message,
Tim Waugh ee6b34 
+                               ServerName, NULL, NULL, 1);
Tim Waugh ee6b34 
+        free(audit_message);
Tim Waugh f4b662 
+      }
Tim Waugh ee6b34 
+    }
Tim Waugh ee6b34 
+    else
Tim Waugh ee6b34 
+    {
Tim Waugh ee6b34 
+      jobcon = context_new(job->scon);
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
+      if ((attr = ippFindAttribute(job->attrs, "job-sheets", IPP_TAG_NAME)) == NULL)
Tim Waugh ee6b34 
+        label_template = strdup(Classification);
Tim Waugh ee6b34 
+      else if (attr->num_values > 1 &&
Tim Waugh ee6b34 
+               strcmp(attr->values[1].string.text, "none") != 0)
Tim Waugh ee6b34 
+        label_template = strdup(attr->values[1].string.text);
Tim Waugh ee6b34 
+      else
Tim Waugh ee6b34 
+        label_template = strdup(attr->values[0].string.text);
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
+      if (strcasecmp(label_template, MLS_CONFIG) == 0)
Tim Waugh ee6b34 
+        mls_label = context_range_get(jobcon);
Tim Waugh ee6b34 
+      else if (strcasecmp(label_template, TE_CONFIG) == 0)
Tim Waugh ee6b34 
+        mls_label = context_type_get(jobcon);
Tim Waugh ee6b34 
+      else if (strcasecmp(label_template, SELINUX_CONFIG) == 0)
Tim Waugh ee6b34 
+        mls_label = context_str(jobcon);
Tim Waugh ee6b34 
+      else
Tim Waugh ee6b34 
+        mls_label = label_template;
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
+      if (mls_label && (PerPageLabels || banner_page))
Tim Waugh f4b662 
+      {
Tim Waugh ee6b34 
+        snprintf(classification, sizeof(classification), "CLASSIFICATION=LSPP:%s", mls_label);
Tim Waugh ee6b34 
+        envp[envc ++] = classification;
Tim Waugh ee6b34 
+      }
Tim Waugh f4b662 
+
Tim Waugh ee6b34 
+      if ((AuditLog != -1) && !banner_page)
Tim Waugh ee6b34 
+      {
Tim Waugh ee6b34 
+        audit_message = NULL;
Tim Waugh ee6b34 
+        cupsdSetStringf(&audit_message, "job=%d auid=%u acct=%s printer=%s title=%s"
Tim Waugh ee6b34 
+                        " obj=%s label=%s", job->id, job->auid, job->username,
Tim Waugh ee6b34 
+                        printer->name, title, job->scon, mls_label?mls_label:"none");
Tim Waugh ee6b34 
+        audit_log_user_message(AuditLog, AUDIT_USER_LABELED_EXPORT, audit_message,
Tim Waugh ee6b34 
+                               ServerName, NULL, NULL, 1);
Tim Waugh ee6b34 
+        free(audit_message);
Tim Waugh 9ad376 
+      }
Tim Waugh ee6b34 
+      context_free(jobcon);
Tim Waugh ee6b34 
+      free(label_template);
Tim Waugh 5dd986 
+    }
Tim Waugh ee6b34 
+  }
Tim Waugh ee6b34 
+  else
Tim Waugh ee6b34 
+   /*
Tim Waugh ee6b34 
+    * Fall through to the non-LSPP behavior
Tim Waugh ee6b34 
+    */
Tim Waugh 5dd986 
+#endif /* WITH_LSPP */
Tim Waugh ee6b34 
   if (Classification && !banner_page)
Tim Waugh ee6b34 
   {
Tim Waugh ee6b34 
     if ((attr = ippFindAttribute(job->attrs, "job-sheets",
Tim Waugh f4b662 
--- cups-1.2.8/scheduler/printers.c.lspp	2007-03-02 14:06:43.000000000 +0000
Tim Waugh f4b662 
+++ cups-1.2.8/scheduler/printers.c	2007-03-02 14:06:43.000000000 +0000
Tim Waugh f4b662 
@@ -57,6 +57,8 @@
Tim Waugh f4b662 
  *                                 printing desktop tools.
Tim Waugh f4b662 
  */
Tim Waugh f4b662
Tim Waugh f4b662 
+/* (c) Copyright 2005-2006 Hewlett-Packard Development Company, L.P. */
Tim Waugh 5dd986 
+
Tim Waugh f4b662 
 /*
Tim Waugh f4b662 
  * Include necessary headers...
Tim Waugh f4b662 
  */
Tim Waugh f4b662 
@@ -79,6 +81,10 @@
Tim Waugh f4b662 
 static void	write_irix_state(cupsd_printer_t *p);
Tim Waugh f4b662 
 #endif /* __sgi */
Tim Waugh f4b662
Tim Waugh 5dd986 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+#  include <libaudit.h>
Tim Waugh f4b662 
+#  include <selinux/context.h>
Tim Waugh 5dd986 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8
Tim Waugh f4b662 
 /*
Tim Waugh f4b662 
  * 'cupsdAddPrinter()' - Add a printer to the system.
Tim Waugh f4b662 
@@ -1472,6 +1478,13 @@
Tim Waugh f4b662 
 		  "two-sided-long-edge",
Tim Waugh f4b662 
 		  "two-sided-short-edge"
Tim Waugh f4b662 
 		};
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  char		*audit_message;		/* Audit message string */
Tim Waugh f4b662 
+  char		*printerfile;		/* Path to a local printer dev */
Tim Waugh f4b662 
+  char		*rangestr;		/* Printer's range if its available */
Tim Waugh f4b662 
+  security_context_t	devcon;		/* Printer SELinux context */
Tim Waugh f4b662 
+  context_t	printercon;		/* context_t for the printer */
Tim Waugh 75d0e8 
+#endif /* WITH_LSPP */
Tim Waugh 75d0e8
Tim Waugh 75d0e8
Tim Waugh f4b662 
   DEBUG_printf(("cupsdSetPrinterAttrs: entering name = %s, type = %x\n", p->name,
Tim Waugh f4b662 
@@ -1579,6 +1592,44 @@
Tim Waugh f4b662 
       attr->values[1].string.text = _cupsStrAlloc(Classification ?
Tim Waugh f4b662 
 	                                   Classification : p->job_sheets[1]);
Tim Waugh f4b662 
     }
Tim Waugh 75d0e8 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+    if (AuditLog != -1)
Tim Waugh f4b662 
+    {
Tim Waugh f4b662 
+      char uri[HTTP_MAX_URI];
Tim Waugh f4b662 
+      audit_message = NULL;
Tim Waugh f4b662 
+      rangestr = NULL;
Tim Waugh f4b662 
+      printercon = 0;
Tim Waugh f4b662 
+      printerfile = strstr(p->device_uri, "/dev/");
Tim Waugh f4b662 
+      if (printerfile == NULL && (strncmp(p->device_uri, "file:/", 6) == 0))
Tim Waugh f4b662 
+        printerfile = strdup(p->device_uri + strlen("file:/"));
Tim Waugh d04237 
+
Tim Waugh f4b662 
+      if (printerfile != NULL)
Tim Waugh f4b662 
+      {
Tim Waugh f4b662 
+        if (getfilecon(printerfile, &devcon) == -1)
Tim Waugh f4b662 
+          cupsdLogMessage(CUPSD_LOG_ERROR, "cupsdSetPrinterAttrs: Unable to get printer context");
Tim Waugh f4b662 
+        else
Tim Waugh f4b662 
+        {
Tim Waugh f4b662 
+          printercon = context_new(devcon);
Tim Waugh f4b662 
+          freecon(devcon);
Tim Waugh f4b662 
+        }
Tim Waugh f4b662 
+      }
Tim Waugh d04237 
+
Tim Waugh f4b662 
+      if (printercon && context_range_get(printercon))
Tim Waugh f4b662 
+        rangestr = strdup(context_range_get(printercon));
Tim Waugh f4b662 
+      else
Tim Waugh f4b662 
+        rangestr = strdup("unknown");
Tim Waugh d04237 
+
Tim Waugh f4b662 
+      cupsdSanitizeURI(p->device_uri, uri, sizeof(uri));
Tim Waugh f4b662 
+      cupsdSetStringf(&audit_message, "printer=%s uri=%s banners=%s,%s range=%s",
Tim Waugh f4b662 
+                      p->name, uri, p->job_sheets[0], p->job_sheets[1], rangestr);
Tim Waugh f4b662 
+      audit_log_user_message(AuditLog, AUDIT_LABEL_LEVEL_CHANGE, audit_message,
Tim Waugh f4b662 
+                             ServerName, NULL, NULL, 1);
Tim Waugh f4b662 
+      if (printercon)
Tim Waugh f4b662 
+        context_free(printercon);
Tim Waugh f4b662 
+      free(rangestr);
Tim Waugh f4b662 
+      free(audit_message);
Tim Waugh f4b662 
+    }
Tim Waugh 9ad376 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
   }
Tim Waugh f4b662
Tim Waugh f4b662 
   printer_type = p->type;
Tim Waugh f4b662 
--- cups-1.2.8/scheduler/job.h.lspp	2006-09-19 21:11:08.000000000 +0100
Tim Waugh f4b662 
+++ cups-1.2.8/scheduler/job.h	2007-03-02 14:06:43.000000000 +0000
Tim Waugh f4b662 
@@ -22,6 +22,13 @@
Tim Waugh f4b662 
  *         WWW: http://www.cups.org
Tim Waugh d04237 
  */
Tim Waugh 9ad376
Tim Waugh d04237 
+/* Copyright (C) 2005 Trusted Computer Solutions, Inc. */
Tim Waugh d04237 
+/* (c) Copyright 2005-2006 Hewlett-Packard Development Company, L.P. */
Tim Waugh d04237 
+
Tim Waugh f4b662 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+#include <selinux/selinux.h>
Tim Waugh f4b662 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
+
Tim Waugh d04237 
 /*
Tim Waugh f4b662 
  * Job request structure...
Tim Waugh d04237 
  */
Tim Waugh f4b662 
@@ -55,6 +62,10 @@
Tim Waugh f4b662 
   int			status;		/* Status code from filters */
Tim Waugh f4b662 
   cupsd_printer_t	*printer;	/* Printer this job is assigned to */
Tim Waugh f4b662 
   int			tries;		/* Number of tries for this job */
Tim Waugh f4b662 
+#ifdef WITH_LSPP
Tim Waugh f4b662 
+  security_context_t	scon;		/* Security context of job */
Tim Waugh f4b662 
+  uid_t			auid;		/* Audit loginuid for this job */
Tim Waugh f4b662 
+#endif /* WITH_LSPP */
Tim Waugh f4b662 
 } cupsd_job_t;
Tim Waugh f4b662
Tim Waugh f4b662
Tim Waugh ee6b34 
--- cups-1.2.4-base/filter/common.c	2007-03-12 16:55:55.000000000 -0400
Tim Waugh ee6b34 
+++ cups-1.2.4/filter/common.c	2007-03-12 16:53:14.000000000 -0400
Tim Waugh ee6b34 
@@ -38,6 +38,12 @@
Tim Waugh ee6b34 
  * Include necessary headers...
Tim Waugh ee6b34 
  */
Tim Waugh ee6b34
Tim Waugh ee6b34 
+#include "config.h"
Tim Waugh ee6b34 
+#ifdef WITH_LSPP
Tim Waugh ee6b34 
+#define _GNU_SOURCE
Tim Waugh ee6b34 
+#include <string.h>
Tim Waugh ee6b34 
+#endif /* WITH_LSPP */
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
 #include "common.h"
Tim Waugh ee6b34 
 #include <locale.h>
Tim Waugh ee6b34
Tim Waugh ee6b34 
@@ -319,6 +325,18 @@
Tim Waugh ee6b34 
 {
Tim Waugh ee6b34 
   const char	*classification;	/* CLASSIFICATION environment variable */
Tim Waugh ee6b34 
   const char	*ptr;			/* Temporary string pointer */
Tim Waugh ee6b34 
+#ifdef WITH_LSPP
Tim Waugh ee6b34 
+  int           i,                      /* counter */
Tim Waugh ee6b34 
+                n,                      /* counter */
Tim Waugh ee6b34 
+                lines,                  /* number of lines needed */
Tim Waugh ee6b34 
+                line_len,               /* index into tmp_label */
Tim Waugh ee6b34 
+                label_len,              /* length of the label in characters */
Tim Waugh ee6b34 
+                label_index,            /* index into the label */
Tim Waugh ee6b34 
+                longest,                /* length of the longest line */
Tim Waugh ee6b34 
+                longest_line,           /* index to the longest line */
Tim Waugh ee6b34 
+                max_width;              /* maximum width in characters */
Tim Waugh ee6b34 
+  char          **wrapped_label;        /* label with line breaks */
Tim Waugh ee6b34 
+#endif /* WITH_LSPP */
Tim Waugh ee6b34
Tim Waugh ee6b34
Tim Waugh ee6b34 
  /*
Tim Waugh ee6b34 
@@ -341,6 +359,124 @@
Tim Waugh ee6b34 
     return;
Tim Waugh ee6b34 
   }
Tim Waugh ee6b34
Tim Waugh ee6b34 
+#ifdef WITH_LSPP
Tim Waugh ee6b34 
+  if (strncmp(classification, "LSPP:", 5) == 0 && label == NULL)
Tim Waugh ee6b34 
+  {
Tim Waugh ee6b34 
+   /*
Tim Waugh ee6b34 
+    * Based on the 12pt fixed width font below determine the max_width
Tim Waugh ee6b34 
+    */
Tim Waugh ee6b34 
+    max_width = width / 8;
Tim Waugh ee6b34 
+    longest_line = 0;
Tim Waugh ee6b34 
+    longest = 0;
Tim Waugh ee6b34 
+    classification += 5; // Skip the "LSPP:"
Tim Waugh ee6b34 
+    label_len = strlen(classification);
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
+    if (label_len > max_width)
Tim Waugh ee6b34 
+    {
Tim Waugh ee6b34 
+      lines = 1 + (int)(label_len / max_width);
Tim Waugh ee6b34 
+      line_len = (int)(label_len / lines);
Tim Waugh ee6b34 
+      wrapped_label = malloc(sizeof(wrapped_label) * lines);
Tim Waugh ee6b34 
+      label_index = i = n = 0;
Tim Waugh ee6b34 
+      while (classification[label_index])
Tim Waugh ee6b34 
+      {
Tim Waugh ee6b34 
+        if ((label_index + line_len) > label_len)
Tim Waugh ee6b34 
+          break;
Tim Waugh ee6b34 
+        switch (classification[label_index + line_len + i])
Tim Waugh ee6b34 
+        {
Tim Waugh ee6b34 
+          case ':':
Tim Waugh ee6b34 
+          case ',':
Tim Waugh ee6b34 
+          case '-':
Tim Waugh ee6b34 
+            i++;
Tim Waugh ee6b34 
+            wrapped_label[n++] = strndup(&classification[label_index], (line_len + i));
Tim Waugh ee6b34 
+            label_index += line_len + i;
Tim Waugh ee6b34 
+            i = 0;
Tim Waugh ee6b34 
+            break;
Tim Waugh ee6b34 
+          default:
Tim Waugh ee6b34 
+            i++;
Tim Waugh ee6b34 
+            break;
Tim Waugh ee6b34 
+        }
Tim Waugh ee6b34 
+        if ((i + line_len) == max_width)
Tim Waugh ee6b34 
+        {
Tim Waugh ee6b34 
+          wrapped_label[n++] = strndup(&(classification[label_index]), (line_len + i));
Tim Waugh ee6b34 
+          label_index = label_index + line_len + i;
Tim Waugh ee6b34 
+          i = 0;
Tim Waugh ee6b34 
+        }
Tim Waugh ee6b34 
+      }
Tim Waugh ee6b34 
+      wrapped_label[n] = strndup(&classification[label_index], label_len - label_index);
Tim Waugh ee6b34 
+    }
Tim Waugh ee6b34 
+    else
Tim Waugh ee6b34 
+    {
Tim Waugh ee6b34 
+      lines = 1;
Tim Waugh ee6b34 
+      wrapped_label = malloc(sizeof(wrapped_label));
Tim Waugh ee6b34 
+      wrapped_label[0] = (char*)classification;
Tim Waugh ee6b34 
+    }
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
+    for (n = 0; n < lines; n++ )
Tim Waugh ee6b34 
+    {
Tim Waugh ee6b34 
+      printf("userdict/ESPp%c(", ('a' + n));
Tim Waugh ee6b34 
+      for (ptr = wrapped_label[n], i = 0; *ptr; ptr ++, i++)
Tim Waugh ee6b34 
+        if (*ptr < 32 || *ptr > 126)
Tim Waugh ee6b34 
+          printf("\\%03o", *ptr);
Tim Waugh ee6b34 
+        else
Tim Waugh ee6b34 
+        {
Tim Waugh ee6b34 
+          if (*ptr == '(' || *ptr == ')' || *ptr == '\\')
Tim Waugh ee6b34 
+            putchar('\\');
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
+          printf("%c", *ptr);
Tim Waugh ee6b34 
+        }
Tim Waugh ee6b34 
+      if (i > longest)
Tim Waugh ee6b34 
+      {
Tim Waugh ee6b34 
+        longest = i;
Tim Waugh ee6b34 
+        longest_line = n;
Tim Waugh ee6b34 
+      }
Tim Waugh ee6b34 
+      printf(")put\n");
Tim Waugh ee6b34 
+    }
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
+   /*
Tim Waugh ee6b34 
+    * For LSPP use a fixed width font so that line wrapping can be calculated
Tim Waugh ee6b34 
+    */
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
+    puts("userdict/ESPlf /Nimbus-Mono findfont 12 scalefont put");
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
+   /*
Tim Waugh ee6b34 
+    * Finally, the procedure to write the labels on the page...
Tim Waugh ee6b34 
+    */
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
+    printf("userdict/ESPwl{\n"
Tim Waugh ee6b34 
+           "  ESPlf setfont\n");
Tim Waugh ee6b34 
+    printf("  ESPp%c stringwidth pop dup 12 add exch -0.5 mul %.0f add\n ",
Tim Waugh ee6b34 
+           'a' + longest_line, width * 0.5f);
Tim Waugh ee6b34 
+    for (n = 1; n < lines; n++)
Tim Waugh ee6b34 
+      printf(" dup");
Tim Waugh ee6b34 
+    printf("\n  1 setgray\n");
Tim Waugh ee6b34 
+    printf("  dup 6 sub %.0f %d index %.0f ESPrf\n",
Tim Waugh ee6b34 
+           (bottom - 2.0), (2 + lines), 6.0 + (16.0 * lines));
Tim Waugh ee6b34 
+    printf("  dup 6 sub %.0f %d index %.0f ESPrf\n",
Tim Waugh ee6b34 
+           (top - 6.0 - (16.0 * lines)), (2 + lines), 4.0 + (16.0 * lines));
Tim Waugh ee6b34 
+    printf("  0 setgray\n");
Tim Waugh ee6b34 
+    printf("  dup 6 sub %.0f %d index %.0f ESPrs\n",
Tim Waugh ee6b34 
+           (bottom - 2.0), (2 + lines), 6.0 + (16.0 * lines));
Tim Waugh ee6b34 
+    printf("  dup 6 sub %.0f %d index %.0f ESPrs\n",
Tim Waugh ee6b34 
+           (top - 6.0 - (16.0 * lines)), (2 + lines), 4.0 + (16.0 * lines));
Tim Waugh ee6b34 
+    for (n = 0; n < lines; n ++)
Tim Waugh ee6b34 
+    {
Tim Waugh ee6b34 
+      printf("  dup %.0f moveto ESPp%c show\n",
Tim Waugh ee6b34 
+             bottom + 6.0 + ((lines - (n+1)) * 16.0), 'a' + n);
Tim Waugh ee6b34 
+      printf("  %.0f moveto ESPp%c show\n", top + 2.0 - ((n + 1) * 16.0), 'a' + n);
Tim Waugh ee6b34 
+    }
Tim Waugh ee6b34 
+    printf("  pop\n"
Tim Waugh ee6b34 
+           "}bind put\n");
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
+   /*
Tim Waugh ee6b34 
+    * Do some clean up at the end of the LSPP special case
Tim Waugh ee6b34 
+    */
Tim Waugh ee6b34 
+    free(wrapped_label);
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
+  }
Tim Waugh ee6b34 
+  else
Tim Waugh ee6b34 
+  {
Tim Waugh ee6b34 
+#endif /* !WITH_LSPP */
Tim Waugh ee6b34 
+
Tim Waugh ee6b34 
  /*
Tim Waugh ee6b34 
   * Set the classification + page label string...
Tim Waugh ee6b34 
   */
Tim Waugh ee6b34 
@@ -421,7 +557,10 @@
Tim Waugh ee6b34 
   printf("  %.0f moveto ESPpl show\n", top - 14.0);
Tim Waugh ee6b34 
   puts("pop");
Tim Waugh ee6b34 
   puts("}bind put");
Tim Waugh ee6b34 
+  }
Tim Waugh ee6b34 
+#ifdef WITH_LSPP
Tim Waugh ee6b34 
 }
Tim Waugh ee6b34 
+#endif /* WITH_LSPP */
Tim Waugh ee6b34
Tim Waugh ee6b34
Tim Waugh ee6b34 
 /*

Powered by Pagure 5.14.1

SSH Hostkey/Fingerprint | Documentation