\u9650\u5236\u8ab0\u53ef\u4ee5\u5b58\u53d6\u4f60\u7684CUPS\u4f3a\u670d\u5668\u81f3\u95dc\u91cd\u8981\u3002\u7de8\u8f2f \/etc\/cups\/cupsd.conf \u6a94\u6848\u4ee5\u9650\u5236\u5b58\u53d6:<\/p>\n

\r\n    # \u5b58\u53d6\u63a7\u5236\u914d\u7f6e\u793a\u4f8b\r\n    <Location \/>\r\n      Order allow,deny\r\n      Allow localhost\r\n      Allow 192.168.1.0\/24\r\n    <\/Location>\r\n    <\/code><\/pre>\n
3. \u4f7f\u7528\u9632\u706b\u7246\u898f\u5247<\/h3>\n
\u5be6\u65bd\u9632\u706b\u7246\u898f\u5247\u4ee5\u63a7\u5236\u5230CUPS\u4f3a\u670d\u5668\u7684\u6d41\u91cf\u3002\u4ee5\u4e0b\u662f\u4f7f\u7528iptables\u7684\u793a\u4f8b:<\/p>\n
\r\n    # \u50c5\u5141\u8a31\u4f86\u81ea\u53d7\u4fe1\u4efb\u7db2\u8def\u7684CUPS\u6d41\u91cf\r\n    $ sudo iptables -A INPUT -p tcp --dport 631 -s 192.168.1.0\/24 -j ACCEPT\r\n    $ sudo iptables -A INPUT -p tcp --dport 631 -j DROP\r\n    <\/code><\/pre>\n
4. \u555f\u7528\u5168\u9762\u65e5\u8a8c\u8a18\u9304<\/h3>\n
\u5f37\u5927\u7684\u65e5\u8a8c\u8a18\u9304\u53ef\u4ee5\u5e6b\u52a9\u4f60\u6aa2\u6e2c\u548c\u56de\u61c9\u6f5b\u5728\u7684\u5b89\u5168\u554f\u984c\u3002\u4fee\u6539\u4f60\u7684CUPS\u914d\u7f6e\u4ee5\u555f\u7528\u8a73\u7d30\u65e5\u8a8c\u8a18\u9304:<\/p>\n
\r\n    # \u6dfb\u52a0\u5230 \/etc\/cups\/cups-files.conf\r\n    LogLevel debug2\r\n    <\/code><\/pre>\n
\u901a\u904e\u5be6\u65bd\u9019\u4e9b\u63aa\u65bd,\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u63d0\u4f9b\u5546\u548cLinux\u7ba1\u7406\u54e1\u53ef\u4ee5\u986f\u8457\u589e\u5f37\u5176CUPS\u5b89\u5168\u614b\u52e2,\u964d\u4f4e\u9060\u7aef\u7a0b\u5f0f\u78bc\u57f7\u884c\u548c\u5176\u4ed6\u6f5b\u5728\u6f0f\u6d1e\u5229\u7528\u7684\u98a8\u96aa\u3002<\/p>\n
   [\/vc_column_text][\/vc_column][\/vc_row] [vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””] <\/p>\n
\u9032\u968eCUPS\u5b89\u5168\u6280\u8853<\/strong><\/h2>\n
\u5c0d\u65bc\u90a3\u4e9b\u5e0c\u671b\u5c07CUPS\u5b89\u5168\u63d0\u5347\u5230\u66f4\u9ad8\u6c34\u5e73\u7684\u4eba,\u8acb\u8003\u616e\u4ee5\u4e0b\u9032\u968e\u6280\u8853:<\/p>\n
\n
\u70baCUPS\u5be6\u65bdSELinux\u6216AppArmor\u914d\u7f6e\u6a94\u6848<\/li>\n
\u4f7f\u7528TLS\/SSL\u9032\u884c\u8207CUPS\u7684\u52a0\u5bc6\u901a\u8a0a<\/li>\n
\u5b9a\u671f\u7a3d\u6838CUPS\u914d\u7f6e\u548c\u65e5\u8a8c<\/li>\n<\/ul>\n
\u9019\u4e9b\u9032\u968e\u63aa\u65bd\u53ef\u4ee5\u63d0\u4f9b\u984d\u5916\u7684\u5b89\u5168\u5c64,\u5c0d\u65bc\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u63d0\u4f9b\u5546\u7b49\u9ad8\u50f9\u503c\u76ee\u6a19\u81f3\u95dc\u91cd\u8981\u3002<\/p>\n
   [\/vc_column_text][\/vc_column][\/vc_row] [vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””] <\/p>\n
\u6aa2\u6e2cCUPS\u6f0f\u6d1e<\/strong><\/h2>\n
\u4e3b\u52d5\u6aa2\u6e2cCUPS\u6f0f\u6d1e\u81f3\u95dc\u91cd\u8981\u3002\u4ee5\u4e0b\u662f\u4e00\u500b\u7c21\u55ae\u7684bash\u8173\u672c,\u7528\u65bc\u6aa2\u67e5\u5e38\u898b\u7684\u932f\u8aa4\u914d\u7f6e:<\/p>\n
\r\n    #!\/bin\/bash\r\n\r\n    echo \"\u6aa2\u67e5CUPS\u914d\u7f6e...\"\r\n\r\n    # \u6aa2\u67e5CUPS\u662f\u5426\u6b63\u5728\u904b\u884c\r\n    if systemctl is-active --quiet cups; then\r\n        echo \"CUPS\u6b63\u5728\u904b\u884c\"\r\n    else\r\n        echo \"\u8b66\u544a: CUPS\u672a\u904b\u884c\"\r\n    fi\r\n\r\n    # \u6aa2\u67e5CUPS\u7248\u672c\r\n    cups_version=$(cups-config --version)\r\n    echo \"CUPS\u7248\u672c: $cups_version\"\r\n\r\n    # \u6aa2\u67e5\u958b\u653e\u7aef\u53e3\r\n    if netstat -tuln | grep :631 > \/dev\/null; then\r\n        echo \"\u8b66\u544a: CUPS\u7aef\u53e3631\u958b\u653e\"\r\n    else\r\n        echo \"CUPS\u7aef\u53e3631\u672a\u958b\u653e\"\r\n    fi\r\n\r\n    # \u6aa2\u67e5cupsd.conf\u7684\u57fa\u672c\u5b89\u5168\u8a2d\u7f6e\r\n    if grep -q \"Require valid-user\" \/etc\/cups\/cupsd.conf; then\r\n        echo \"CUPS\u5b58\u53d6\u9700\u8981\u8eab\u4efd\u9a57\u8b49\"\r\n    else\r\n        echo \"\u8b66\u544a: CUPS\u5b58\u53d6\u4e0d\u9700\u8981\u8eab\u4efd\u9a57\u8b49\"\r\n    fi\r\n\r\n    echo \"CUPS\u5b89\u5168\u6aa2\u67e5\u5b8c\u6210\"\r\n    <\/code><\/pre>\n
\u6b64\u8173\u672c\u63d0\u4f9b\u4e86CUPS\u5b89\u5168\u72c0\u614b\u7684\u57fa\u672c\u6982\u8ff0\u3002\u5c0d\u65bc\u5168\u9762\u7684\u6f0f\u6d1e\u6aa2\u6e2c,\u8acb\u8003\u616e\u4f7f\u7528\u5c08\u9580\u7684\u5b89\u5168\u6383\u63cf\u5de5\u5177\u3002<\/p>\n
   [\/vc_column_text][\/vc_column][\/vc_row] [vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””] <\/p>\n
\u7d50\u8ad6<\/strong><\/h2>\n
\u9632\u7bc4CUPS\u9060\u7aef\u7a0b\u5f0f\u78bc\u57f7\u884c\u6f0f\u6d1e\u662fLinux\u7ba1\u7406\u54e1\u7684\u95dc\u9375\u4efb\u52d9,\u5c24\u5176\u662f\u90a3\u4e9b\u7ba1\u7406\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u670d\u52d9\u7684\u7ba1\u7406\u54e1\u3002\u901a\u904e\u9075\u5faa\u672c\u6307\u5357\u4e2d\u6982\u8ff0\u7684\u6b65\u9a5f,\u4f60\u53ef\u4ee5\u986f\u8457\u589e\u5f37\u4f3a\u670d\u5668\u7684\u5b89\u5168\u614b\u52e2\u3002\u8acb\u8a18\u4f4f,\u7db2\u8def\u5b89\u5168\u662f\u4e00\u500b\u6301\u7e8c\u7684\u904e\u7a0b – \u4fdd\u6301\u8b66\u60d5,\u4f7f\u7cfb\u7d71\u4fdd\u6301\u6700\u65b0,\u4e26\u5b9a\u671f\u7a3d\u6838\u4f60\u7684\u5b89\u5168\u63aa\u65bd,\u4ee5\u4fdd\u6301\u9818\u5148\u65bc\u6f5b\u5728\u5a01\u8105\u3002<\/p>\n
\u5c0d\u65bc\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u63d0\u4f9b\u5546\u548c\u6280\u8853\u611b\u597d\u8005\u4f86\u8aaa,\u9632\u7bc4CUPS\u6f0f\u6d1e\u4e0d\u50c5\u50c5\u662f\u4fdd\u8b77\u5217\u5370\u7cfb\u7d71 – \u5b83\u95dc\u4fc2\u5230\u4fdd\u8b77\u6574\u500b\u57fa\u790e\u8a2d\u65bd\u514d\u53d7\u6f5b\u5728\u7684\u9060\u7aef\u7a0b\u5f0f\u78bc\u57f7\u884c\u653b\u64ca\u3002\u4fdd\u6301\u5b89\u5168,\u4fdd\u6301\u8b66\u60d5,\u4e26\u78ba\u4fdd\u4f60\u7684Linux\u4f3a\u670d\u5668\u5b89\u5168\u3001\u9806\u66a2\u5730\u904b\u884c\u3002<\/p>\n
[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"
[vc_row el_class=”blog-detail-section”][vc_ […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":16650,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[61],"tags":[3841,3842,3207,2599,247],"class_list":["post-16655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hong-kong-dedicated-server-tc","tag-cups-vulnerability-tc","tag-remote-code-execution-tc","tag-linux-security-tc","tag-2599","tag-hong-kong-server-rental-tc"],"acf":[],"yoast_head":"\n