\u9650\u5236\u8c01\u53ef\u4ee5\u8bbf\u95ee\u4f60\u7684CUPS\u670d\u52a1\u5668\u81f3\u5173\u91cd\u8981\u3002\u7f16\u8f91 \/etc\/cups\/cupsd.conf \u6587\u4ef6\u4ee5\u9650\u5236\u8bbf\u95ee:<\/p>\n

\r\n    # \u8bbf\u95ee\u63a7\u5236\u914d\u7f6e\u793a\u4f8b\r\n    <Location \/>\r\n      Order allow,deny\r\n      Allow localhost\r\n      Allow 192.168.1.0\/24\r\n    <\/Location>\r\n    <\/code><\/pre>\n
3. \u4f7f\u7528\u9632\u706b\u5899\u89c4\u5219<\/h3>\n
\u5b9e\u65bd\u9632\u706b\u5899\u89c4\u5219\u4ee5\u63a7\u5236\u5230CUPS\u670d\u52a1\u5668\u7684\u6d41\u91cf\u3002\u4ee5\u4e0b\u662f\u4f7f\u7528iptables\u7684\u793a\u4f8b:<\/p>\n
\r\n    # \u4ec5\u5141\u8bb8\u6765\u81ea\u53d7\u4fe1\u4efb\u7f51\u7edc\u7684CUPS\u6d41\u91cf\r\n    $ sudo iptables -A INPUT -p tcp --dport 631 -s 192.168.1.0\/24 -j ACCEPT\r\n    $ sudo iptables -A INPUT -p tcp --dport 631 -j DROP\r\n    <\/code><\/pre>\n
4. \u542f\u7528\u5168\u9762\u65e5\u5fd7\u8bb0\u5f55<\/h3>\n
\u5f3a\u5927\u7684\u65e5\u5fd7\u8bb0\u5f55\u53ef\u4ee5\u5e2e\u52a9\u4f60\u68c0\u6d4b\u548c\u54cd\u5e94\u6f5c\u5728\u7684\u5b89\u5168\u95ee\u9898\u3002\u4fee\u6539\u4f60\u7684CUPS\u914d\u7f6e\u4ee5\u542f\u7528\u8be6\u7ec6\u65e5\u5fd7\u8bb0\u5f55:<\/p>\n
\r\n    # \u6dfb\u52a0\u5230 \/etc\/cups\/cups-files.conf\r\n    LogLevel debug2\r\n    <\/code><\/pre>\n
\u901a\u8fc7\u5b9e\u65bd\u8fd9\u4e9b\u63aa\u65bd,\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u63d0\u4f9b\u5546\u548cLinux\u7ba1\u7406\u5458\u53ef\u4ee5\u663e\u8457\u589e\u5f3a\u5176CUPS\u5b89\u5168\u6001\u52bf,\u964d\u4f4e\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u548c\u5176\u4ed6\u6f5c\u5728\u6f0f\u6d1e\u5229\u7528\u7684\u98ce\u9669\u3002<\/p>\n
   [\/vc_column_text][\/vc_column][\/vc_row] [vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]   <\/p>\n
\u9ad8\u7ea7CUPS\u5b89\u5168\u6280\u672f<\/strong><\/h2>\n
\u5bf9\u4e8e\u90a3\u4e9b\u5e0c\u671b\u5c06CUPS\u5b89\u5168\u63d0\u5347\u5230\u66f4\u9ad8\u6c34\u5e73\u7684\u4eba,\u8bf7\u8003\u8651\u4ee5\u4e0b\u9ad8\u7ea7\u6280\u672f:<\/p>\n
\n
\u4e3aCUPS\u5b9e\u65bdSELinux\u6216AppArmor\u914d\u7f6e\u6587\u4ef6<\/li>\n
\u4f7f\u7528TLS\/SSL\u8fdb\u884c\u4e0eCUPS\u7684\u52a0\u5bc6\u901a\u4fe1<\/li>\n
\u5b9a\u671f\u5ba1\u6838CUPS\u914d\u7f6e\u548c\u65e5\u5fd7<\/li>\n<\/ul>\n
\u8fd9\u4e9b\u9ad8\u7ea7\u63aa\u65bd\u53ef\u4ee5\u63d0\u4f9b\u989d\u5916\u7684\u5b89\u5168\u5c42,\u5bf9\u4e8e\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u63d0\u4f9b\u5546\u7b49\u9ad8\u4ef7\u503c\u76ee\u6807\u81f3\u5173\u91cd\u8981\u3002<\/p>\n
   [\/vc_column_text][\/vc_column][\/vc_row] [vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]   <\/p>\n
\u68c0\u6d4bCUPS\u6f0f\u6d1e<\/strong><\/h2>\n
\u4e3b\u52a8\u68c0\u6d4bCUPS\u6f0f\u6d1e\u81f3\u5173\u91cd\u8981\u3002\u4ee5\u4e0b\u662f\u4e00\u4e2a\u7b80\u5355\u7684bash\u811a\u672c,\u7528\u4e8e\u68c0\u67e5\u5e38\u89c1\u7684\u9519\u8bef\u914d\u7f6e:<\/p>\n
\r\n    #!\/bin\/bash\r\n\r\n    echo \"\u68c0\u67e5CUPS\u914d\u7f6e...\"\r\n\r\n    # \u68c0\u67e5CUPS\u662f\u5426\u6b63\u5728\u8fd0\u884c\r\n    if systemctl is-active --quiet cups; then\r\n        echo \"CUPS\u6b63\u5728\u8fd0\u884c\"\r\n    else\r\n        echo \"\u8b66\u544a: CUPS\u672a\u8fd0\u884c\"\r\n    fi\r\n\r\n    # \u68c0\u67e5CUPS\u7248\u672c\r\n    cups_version=$(cups-config --version)\r\n    echo \"CUPS\u7248\u672c: $cups_version\"\r\n\r\n    # \u68c0\u67e5\u5f00\u653e\u7aef\u53e3\r\n    if netstat -tuln | grep :631 > \/dev\/null; then\r\n        echo \"\u8b66\u544a: CUPS\u7aef\u53e3631\u5f00\u653e\"\r\n    else\r\n        echo \"CUPS\u7aef\u53e3631\u672a\u5f00\u653e\"\r\n    fi\r\n\r\n    # \u68c0\u67e5cupsd.conf\u7684\u57fa\u672c\u5b89\u5168\u8bbe\u7f6e\r\n    if grep -q \"Require valid-user\" \/etc\/cups\/cupsd.conf; then\r\n        echo \"CUPS\u8bbf\u95ee\u9700\u8981\u8eab\u4efd\u9a8c\u8bc1\"\r\n    else\r\n        echo \"\u8b66\u544a: CUPS\u8bbf\u95ee\u4e0d\u9700\u8981\u8eab\u4efd\u9a8c\u8bc1\"\r\n    fi\r\n\r\n    echo \"CUPS\u5b89\u5168\u68c0\u67e5\u5b8c\u6210\"\r\n    <\/code><\/pre>\n
\u6b64\u811a\u672c\u63d0\u4f9b\u4e86CUPS\u5b89\u5168\u72b6\u6001\u7684\u57fa\u672c\u6982\u8ff0\u3002\u5bf9\u4e8e\u5168\u9762\u7684\u6f0f\u6d1e\u68c0\u6d4b,\u8bf7\u8003\u8651\u4f7f\u7528\u4e13\u95e8\u7684\u5b89\u5168\u626b\u63cf\u5de5\u5177\u3002<\/p>\n
    [\/vc_column_text][\/vc_column][\/vc_row] [vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]  <\/p>\n
\u7ed3\u8bba<\/strong><\/h2>\n
\u9632\u8303CUPS\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u662fLinux\u7ba1\u7406\u5458\u7684\u5173\u952e\u4efb\u52a1,\u5c24\u5176\u662f\u90a3\u4e9b\u7ba1\u7406\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u670d\u52a1\u7684\u7ba1\u7406\u5458\u3002\u901a\u8fc7\u9075\u5faa\u672c\u6307\u5357\u4e2d\u6982\u8ff0\u7684\u6b65\u9aa4,\u4f60\u53ef\u4ee5\u663e\u8457\u589e\u5f3a\u670d\u52a1\u5668\u7684\u5b89\u5168\u6001\u52bf\u3002\u8bf7\u8bb0\u4f4f,\u7f51\u7edc\u5b89\u5168\u662f\u4e00\u4e2a\u6301\u7eed\u7684\u8fc7\u7a0b – \u4fdd\u6301\u8b66\u60d5,\u4f7f\u7cfb\u7edf\u4fdd\u6301\u6700\u65b0,\u5e76\u5b9a\u671f\u5ba1\u6838\u4f60\u7684\u5b89\u5168\u63aa\u65bd,\u4ee5\u4fdd\u6301\u9886\u5148\u4e8e\u6f5c\u5728\u5a01\u80c1\u3002<\/p>\n
\u5bf9\u4e8e\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u63d0\u4f9b\u5546\u548c\u6280\u672f\u7231\u597d\u8005\u6765\u8bf4,\u9632\u8303CUPS\u6f0f\u6d1e\u4e0d\u4ec5\u4ec5\u662f\u4fdd\u62a4\u6253\u5370\u7cfb\u7edf – \u5b83\u5173\u7cfb\u5230\u4fdd\u62a4\u6574\u4e2a\u57fa\u7840\u8bbe\u65bd\u514d\u53d7\u6f5c\u5728\u7684\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u653b\u51fb\u3002\u4fdd\u6301\u5b89\u5168,\u4fdd\u6301\u8b66\u60d5,\u5e76\u786e\u4fdd\u4f60\u7684Linux\u670d\u52a1\u5668\u5b89\u5168\u3001\u987a\u7545\u5730\u8fd0\u884c\u3002<\/p>\n
[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"
[vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””] \u5728Linux\u5b89\u5168\u9886\u57df,\u4fdd\u6301\u9886\u5148\u4e8e\u6f5c\u5728\u6f0f\u6d1e\u81f3\u5173\u91cd\u8981,\u5c24\u5176\u662f\u5bf9\u4e8e\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u63d0\u4f9b\u5546\u548c\u6280\u672f\u7231\u597d\u8005\u800c\u8a00\u3002\u4e00\u4e2a\u9700\u8981\u7279\u522b\u5173\u6ce8\u7684\u9886\u57df\u662f\u901a\u7528Unix\u6253\u5370\u7cfb\u7edf(CUPS),\u5b83\u5df2\u77e5\u5b58\u5728\u53ef\u80fd\u5bfc\u81f4\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u7684\u6f0f\u6d1e\u3002\u672c\u6587\u6df1\u5165\u63a2\u8ba8\u4e86CUPS\u6f0f\u6d1e\u7684\u590d\u6742\u6027,\u5e76\u63d0\u4f9b\u4e86\u4e00\u4efd\u5168\u9762\u7684\u6307\u5357,\u8bf4\u660e\u5982\u4f55\u52a0\u5f3aLinux\u670d\u52a1\u5668\u4ee5\u9632\u8303\u6b64\u7c7b\u5a01\u80c1\u3002 [\/vc_column_text][\/vc_column][\/vc_row] [vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””] \u4e86\u89e3CUPS\u53ca\u5176\u6f0f\u6d1e CUPS\u662f\u8bb8\u591aLinux\u53d1\u884c\u7248\u4e2d\u7684\u9ed8\u8ba4\u6253\u5370\u7cfb\u7edf,\u662f\u4e00\u4e2a\u7ba1\u7406\u6253\u5370\u673a\u548c\u6253\u5370\u4f5c\u4e1a\u7684\u5f3a\u5927\u5de5\u5177\u3002\u7136\u800c,\u5176\u590d\u6742\u6027\u6709\u65f6\u53ef\u80fd\u5bfc\u81f4\u5b89\u5168\u95ee\u9898\u3002\u4f8b\u5982,\u6700\u8fd1\u7684CVE-2023-32360\u6f0f\u6d1e\u5c31\u7a81\u663e\u4e86CUPS\u4e2d\u7684\u4e00\u4e2a\u7f3a\u9677\u5982\u4f55\u53ef\u80fd\u5141\u8bb8\u653b\u51fb\u8005\u8fdc\u7a0b\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002 \u4e3a\u4e86\u7406\u89e3\u8fd9\u4e2a\u95ee\u9898\u7684\u4e25\u91cd\u6027,\u8ba9\u6211\u4eec\u5206\u89e3\u4e00\u4e0b\u5178\u578b\u7684CUPS\u6f0f\u6d1e\u53ef\u80fd\u5982\u4f55\u88ab\u5229\u7528: # \u5047\u8bbe\u7684\u6f0f\u6d1e\u5229\u7528\u573a\u666f 1. \u653b\u51fb\u8005\u8bc6\u522b\u51fa\u6613\u53d7\u653b\u51fb\u7684CUPS\u670d\u52a1\u5668 2. \u5236\u4f5c\u6076\u610f\u6253\u5370\u4f5c\u4e1a\u6216\u8bf7\u6c42 3. \u5c06\u8bf7\u6c42\u53d1\u9001\u5230CUPS\u670d\u52a1\u5668 4. CUPS\u4ee5\u63d0\u5347\u7684\u6743\u9650\u5904\u7406\u8bf7\u6c42 5. \u6076\u610f\u4ee3\u7801\u6267\u884c,\u53ef\u80fd\u7ed9\u653b\u51fb\u8005\u63a7\u5236\u6743 [\/vc_column_text][\/vc_column][\/vc_row] [vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””] \u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u7684\u89c6\u89d2 \u5bf9\u4e8e\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u63d0\u4f9b\u5546\u6765\u8bf4,\u98ce\u9669\u5c24\u5176\u9ad8\u3002\u4f5c\u4e3a\u5168\u7403\u79d1\u6280\u4e2d\u5fc3,\u8fd9\u91cc\u7684\u670d\u52a1\u5668\u662f\u7f51\u7edc\u72af\u7f6a\u5206\u5b50\u7684\u4e3b\u8981\u76ee\u6807\u3002\u670d\u52a1\u5668\u88ab\u653b\u7834\u53ef\u80fd\u5bfc\u81f4\u6570\u636e\u6cc4\u9732\u3001\u670d\u52a1\u4e2d\u65ad\u548c\u91cd\u5927\u58f0\u8a89\u635f\u5bb3\u3002 [\/vc_column_text][\/vc_column][\/vc_row] [vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””] \u5b9e\u65bd\u5f3a\u5927\u7684CUPS\u5b89\u5168\u63aa\u65bd \u4e3a\u4e86\u964d\u4f4e\u4e0eCUPS\u6f0f\u6d1e\u76f8\u5173\u7684\u98ce\u9669,\u8bf7\u8003\u8651\u5b9e\u65bd\u4ee5\u4e0b\u5b89\u5168\u63aa\u65bd: \u4fdd\u6301CUPS\u66f4\u65b0 \u914d\u7f6e\u8bbf\u95ee\u63a7\u5236 \u4f7f\u7528\u9632\u706b\u5899\u89c4\u5219 \u542f\u7528\u5168\u9762\u65e5\u5fd7\u8bb0\u5f55 \u8ba9\u6211\u4eec\u6df1\u5165\u63a2\u8ba8\u6bcf\u9879\u63aa\u65bd: 1. \u4fdd\u6301CUPS\u66f4\u65b0 \u5b9a\u671f\u66f4\u65b0CUPS\u662f\u4f60\u7684\u7b2c\u4e00\u9053\u9632\u7ebf\u3002\u4ee5\u4e0b\u662f\u5982\u4f55\u68c0\u67e5\u5f53\u524d\u7248\u672c\u5e76\u66f4\u65b0\u5b83: # \u68c0\u67e5CUPS\u7248\u672c $ cups-config –version # \u66f4\u65b0CUPS (Ubuntu\/Debian) $ sudo apt update […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":16651,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[62],"tags":[3843,3844,3210,2597,248],"class_list":["post-16656","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hong-kong-dedicated-server-sc","tag-cups-vulnerability-sc","tag-remote-code-execution-sc","tag-linux-security-sc","tag-server-protection-sc","tag-hong-kong-server-rental-sc"],"acf":[],"yoast_head":"\n