Configuring Printing To Enforce Labeling Decisions

The Security Administrator role needs to configure the following when setting up printers:

Configure the label range on printers based on their accessibility as described in "Rules for Configuring Printers".

The Security Administrator role needs to do the following to allow the company's technical writers to print PostScript files and to print without labels on their output:

1. Give the writers the print a PostScript file and the print without labels authorizations.

2. For printing files from a desktop publishing system such as FrameMaker, inform each user to save (print) the file as a PostScript file and to use lp with the -o nolabels option when printing the PostScript file.

3. Set aside a specific printer that the writers can use to print jobs without labels.

   1. For a printer server running the unlabeled Solaris operating system, do the following:

      1. Specify a label for the print server that matches the label at which users are working when they send jobs to the printer.

         For example, if documents are created at INTERNAL, the print server should be configured with the INTERNAL label, while if documents are created at PUBLIC, the print server should have the PUBLIC label. See "Managing Printing" in the Trusted Solaris Administrator's Procedures for how to specify a default label for an unlabeled print server.

         ---

         Note -

         When a printer is connected to an unlabeled print server, no labels or labeled banner/trailer pages are printed.

         ---

      2. If desired, set up a separate .login file in the single-level directory (SLD) at the appropriate label for each of the writers so that the PRINTER variable is set to be the special-use printer.

   2. If the print server for the writers' printer is running the Trusted Solaris environment, do one of the following:

      1. Make sure the printer is configured so that the Always Print Banners check box is not selected on the Print Manager dialog box.

      2. To turn off page labels for all print jobs sent by anyone, on the Trusted Solaris print server make the change shown in the following example in the /usr/lib/lp/postscript/tsol.separator.ps file.

         %% To eliminate page labels completely, change this line to %% set the page label to an empty string: /PageLabel () def /PageLabel () def