]>
Commit | Line | Data |
---|---|---|
c41769ff | 1 | .\" |
c390f212 | 2 | .\" cups-files.conf man page for CUPS. |
c41769ff | 3 | .\" |
8072030b | 4 | .\" Copyright 2007-2016 by Apple Inc. |
8fe0183a | 5 | .\" Copyright 1997-2006 by Easy Software Products. |
c41769ff | 6 | .\" |
8fe0183a MS |
7 | .\" These coded instructions, statements, and computer programs are the |
8 | .\" property of Apple Inc. and are protected by Federal copyright | |
9 | .\" law. Distribution and use rights are outlined in the file "LICENSE.txt" | |
10 | .\" which should have been included with this file. If this file is | |
11 | .\" file is missing or damaged, see the license at "http://www.cups.org/". | |
c41769ff | 12 | .\" |
efed0562 | 13 | .TH cups-files.conf 5 "CUPS" "19 September 2016" "Apple Inc." |
c41769ff | 14 | .SH NAME |
c390f212 | 15 | cups\-files.conf \- file and directory configuration file for cups |
c41769ff | 16 | .SH DESCRIPTION |
c390f212 MS |
17 | The \fBcups\-files.conf\fR file configures the files and directories used by the CUPS scheduler, |
18 | .BR cupsd (8). | |
19 | It is normally located in the \fI/etc/cups\fR directory. | |
c41769ff | 20 | .LP |
c390f212 | 21 | Each line in the file can be a configuration directive, a blank line, or a comment. |
25d0c3fe MS |
22 | Configuration directives typically consist of a name and zero or more values separated by whitespace. |
23 | The configuration directive name and values are case-insensitive. | |
c390f212 MS |
24 | Comment lines start with the # character. |
25 | .SS DIRECTIVES | |
26 | The following directives are understood by | |
27 | .BR cupsd (8): | |
37d9646b | 28 | .\"#AccessLog |
c41769ff | 29 | .TP 5 |
25d0c3fe | 30 | \fBAccessLog\fR |
c41769ff | 31 | .TP 5 |
25d0c3fe | 32 | \fBAccessLog \fIfilename\fR |
c390f212 | 33 | .TP 5 |
c59e07c6 MS |
34 | \fBAccessLog stderr\fR |
35 | .TP 5 | |
c390f212 | 36 | \fBAccessLog syslog\fR |
c41769ff | 37 | Defines the access log filename. |
c390f212 | 38 | Specifying a blank filename disables access log generation. |
c59e07c6 | 39 | The value "stderr" causes log entries to be sent to the standard error file when the scheduler is running in the foreground, or to the system log daemon when run in the background. |
25d0c3fe | 40 | The value "syslog" causes log entries to be sent to the system log daemon. |
c390f212 MS |
41 | The server name may be included in filenames using the string "%s", for example: |
42 | .nf | |
43 | ||
44 | AccessLog /var/log/cups/%s-access_log | |
45 | ||
46 | .fi | |
25d0c3fe | 47 | The default is "/var/log/cups/access_log". |
37d9646b | 48 | .\"#ConfigFilePerm |
c41769ff | 49 | .TP 5 |
c390f212 MS |
50 | \fBConfigFilePerm \fImode\fR |
51 | Specifies the permissions for all configuration files that the scheduler writes. | |
8072030b | 52 | The default is "0644" on macOS and "0640" on all other operating systems. |
b4a8492a | 53 | .LP |
25d0c3fe | 54 | \fBNote:\fR The permissions for the \fIprinters.conf\fR file are currently masked to only allow access from the scheduler user (typically root). |
c390f212 MS |
55 | This is done because printer device URIs sometimes contain sensitive authentication information that should not be generally known on the system. |
56 | There is no way to disable this security feature. | |
efed0562 MS |
57 | .\"#CreateSelfSignedCerts |
58 | .TP 5 | |
59 | \fBCreateSelfSignedCerts yes\fR | |
60 | .TP 5 | |
61 | \fBCreateSelfSignedCerts no\fR | |
62 | Specifies whether the scheduler automatically creates self-signed certificates for client connections using TLS. | |
63 | The default is yes. | |
37d9646b | 64 | .\"#DataDir |
c41769ff | 65 | .TP 5 |
c390f212 | 66 | \fBDataDir \fIpath\fR |
25d0c3fe MS |
67 | Specifies the directory where data files can be found. |
68 | The default is usually "/usr/share/cups". | |
37d9646b | 69 | .\"#DocumentRoot |
c41769ff | 70 | .TP 5 |
c390f212 | 71 | \fBDocumentRoot \fIdirectory\fR |
25d0c3fe MS |
72 | Specifies the root directory for the CUPS web interface content. |
73 | The default is usually "/usr/share/doc/cups". | |
37d9646b | 74 | .\"#ErrorLog |
25d0c3fe MS |
75 | .TP 5 |
76 | \fBErrorLog\fR | |
c41769ff | 77 | .TP 5 |
25d0c3fe | 78 | \fBErrorLog \fIfilename\fR |
c41769ff | 79 | .TP 5 |
c59e07c6 MS |
80 | \fBErrorLog stderr\fR |
81 | .TP 5 | |
c390f212 MS |
82 | \fBErrorLog syslog\fR |
83 | Defines the error log filename. | |
c390f212 | 84 | Specifying a blank filename disables error log generation. |
c59e07c6 | 85 | The value "stderr" causes log entries to be sent to the standard error file when the scheduler is running in the foreground, or to the system log daemon when run in the background. |
25d0c3fe | 86 | The value "syslog" causes log entries to be sent to the system log daemon. |
c390f212 MS |
87 | The server name may be included in filenames using the string "%s", for example: |
88 | .nf | |
89 | ||
90 | ErrorLog /var/log/cups/%s-error_log | |
91 | ||
92 | .fi | |
25d0c3fe | 93 | The default is "/var/log/cups/error_log". |
37d9646b | 94 | .\"#FatalErrors |
c41769ff | 95 | .TP 5 |
c390f212 | 96 | \fBFatalErrors none\fR |
c41769ff | 97 | .TP 5 |
25d0c3fe | 98 | \fBFatalErrors all \fI\-kind \fR[ ... \fI\-kind \fR] |
c41769ff | 99 | .TP 5 |
25d0c3fe | 100 | \fBFatalErrors \fIkind \fR[ ... \fIkind \fR] |
c390f212 | 101 | Specifies which errors are fatal, causing the scheduler to exit. |
25d0c3fe | 102 | The default is "config". |
c390f212 MS |
103 | The \fIkind\fR strings are: |
104 | .RS 5 | |
c41769ff | 105 | .TP 5 |
c390f212 MS |
106 | .B none |
107 | No errors are fatal. | |
c41769ff | 108 | .TP 5 |
c390f212 MS |
109 | .B all |
110 | All of the errors below are fatal. | |
c41769ff | 111 | .TP 5 |
c390f212 MS |
112 | .B browse |
113 | Browsing initialization errors are fatal, for example failed connections to the DNS-SD daemon. | |
114 | .TP 5 | |
115 | .B config | |
116 | Configuration file syntax errors are fatal. | |
117 | .TP 5 | |
118 | .B listen | |
119 | Listen or Port errors are fatal, except for IPv6 failures on the loopback or "any" addresses. | |
120 | .TP 5 | |
121 | .B log | |
122 | Log file creation or write errors are fatal. | |
c41769ff | 123 | .TP 5 |
c390f212 MS |
124 | .B permissions |
125 | Bad startup file permissions are fatal, for example shared TLS certificate and key files with world-read permissions. | |
126 | .RE | |
37d9646b | 127 | .\"#FileDevice |
c390f212 MS |
128 | .TP 5 |
129 | \fBFileDevice Yes\fR | |
130 | .TP 5 | |
131 | \fBFileDevice No\fR | |
132 | Specifies whether the file pseudo-device can be used for new printer queues. | |
133 | The URI "file:///dev/null" is always allowed. | |
37d9646b | 134 | .\"#Group |
c390f212 | 135 | .TP 5 |
c390f212 MS |
136 | \fBGroup \fIgroup-name-or-number\fR |
137 | Specifies the group name or ID that will be used when executing external programs. | |
25d0c3fe | 138 | The default group is operating system specific but is usually "lp" or "nobody". |
37d9646b | 139 | .\"#LogFilePerm |
c41769ff | 140 | .TP 5 |
c390f212 | 141 | \fBLogFilePerm \fImode\fR |
25d0c3fe MS |
142 | Specifies the permissions of all log files that the scheduler writes. |
143 | The default is "0644". | |
37d9646b | 144 | .\"#PageLog |
c41769ff | 145 | .TP 5 |
c390f212 | 146 | \fBPageLog \fR[ \fIfilename\fR ] |
c41769ff | 147 | .TP 5 |
c59e07c6 MS |
148 | \fBPageLog stderr\fR |
149 | .TP 5 | |
c390f212 MS |
150 | \fBPageLog syslog\fR |
151 | Defines the page log filename. | |
c59e07c6 | 152 | The value "stderr" causes log entries to be sent to the standard error file when the scheduler is running in the foreground, or to the system log daemon when run in the background. |
c390f212 MS |
153 | The value "syslog" causes log entries to be sent to the system log daemon. |
154 | Specifying a blank filename disables page log generation. | |
155 | The server name may be included in filenames using the string "%s", for example: | |
156 | .nf | |
157 | ||
158 | PageLog /var/log/cups/%s-page_log | |
159 | ||
160 | .fi | |
25d0c3fe | 161 | The default is "/var/log/cups/page_log". |
37d9646b | 162 | .\"#RemoteRoot |
c41769ff | 163 | .TP 5 |
c390f212 MS |
164 | \fBRemoteRoot \fIusername\fR |
165 | Specifies the username that is associated with unauthenticated accesses by clients claiming to be the root user. | |
25d0c3fe | 166 | The default is "remroot". |
37d9646b | 167 | .\"#RequestRoot |
c41769ff | 168 | .TP 5 |
c390f212 MS |
169 | \fBRequestRoot \fIdirectory\fR |
170 | Specifies the directory that contains print jobs and other HTTP request data. | |
25d0c3fe | 171 | The default is "/var/spool/cups". |
37d9646b | 172 | .\"#Sandboxing |
c41769ff | 173 | .TP 5 |
c390f212 | 174 | \fBSandboxing relaxed\fR |
8fe0183a | 175 | .TP 5 |
c390f212 MS |
176 | \fBSandboxing strict\fR |
177 | Specifies the level of security sandboxing that is applied to print filters, backends, and other child processes of the scheduler. | |
178 | The default is "strict". | |
8072030b | 179 | This directive is currently only used/supported on macOS. |
37d9646b | 180 | .\"#ServerBin |
8fe0183a | 181 | .TP 5 |
c390f212 MS |
182 | \fBServerBin \fIdirectory\fR |
183 | Specifies the directory containing the backends, CGI programs, filters, helper programs, notifiers, and port monitors. | |
25d0c3fe | 184 | The default is "/usr/lib/cups" or "/usr/libexec/cups" depending on the platform. |
37d9646b | 185 | .\"#ServerKeychain |
c41769ff | 186 | .TP 5 |
c390f212 | 187 | \fBServerKeychain \fIpath\fR |
8fe0183a | 188 | Specifies the location of TLS certificates and private keys. |
8072030b MS |
189 | The default is "/Library/Keychains/System.keychain" on macOS and "/etc/cups/ssl" on all other operating systems. |
190 | macOS uses its keychain database to store certificates and keys while other platforms use separate files in the specified directory, *.crt for PEM-encoded certificates and *.key for PEM-encoded private keys. | |
37d9646b | 191 | .\"#ServerRoot |
c41769ff | 192 | .TP 5 |
c390f212 MS |
193 | \fBServerRoot \fIdirectory\fR |
194 | Specifies the directory containing the server configuration files. | |
25d0c3fe | 195 | The default is "/etc/cups". |
37d9646b | 196 | .\"#SyncOnClose |
c41769ff | 197 | .TP 5 |
c390f212 | 198 | \fBSyncOnClose Yes\fR |
8a259669 | 199 | .TP 5 |
c390f212 MS |
200 | \fBSyncOnClose No\fR |
201 | Specifies whether the scheduler calls | |
202 | .BR fsync (2) | |
25d0c3fe MS |
203 | after writing configuration or state files. |
204 | The default is "No". | |
37d9646b | 205 | .\"#SystemGroup |
8a259669 | 206 | .TP 5 |
25d0c3fe | 207 | \fBSystemGroup \fIgroup-name \fR[ ... \fIgroup-name\fR ] |
c390f212 | 208 | Specifies the group(s) to use for \fI@SYSTEM\fR group authentication. |
25d0c3fe | 209 | The default contains "admin", "lpadmin", "root", "sys", and/or "system". |
37d9646b | 210 | .\"#TempDir |
c41769ff | 211 | .TP 5 |
c390f212 | 212 | \fBTempDir \fIdirectory\fR |
c41769ff | 213 | Specifies the directory where temporary files are stored. |
25d0c3fe | 214 | The default is "/var/spool/cups/tmp". |
37d9646b | 215 | .\"#User |
c41769ff | 216 | .TP 5 |
c390f212 | 217 | \fBUser \fIusername\fR |
c41769ff | 218 | Specifies the user name or ID that is used when running external programs. |
25d0c3fe | 219 | The default is "lp". |
c41769ff | 220 | .SH SEE ALSO |
c390f212 MS |
221 | .BR classes.conf (5), |
222 | .BR cups (1), | |
223 | .BR cupsd (8), | |
224 | .BR cupsd.conf (5), | |
225 | .BR mime.convs (5), | |
226 | .BR mime.types (5), | |
227 | .BR printers.conf (5), | |
228 | .BR subscriptions.conf (5), | |
229 | CUPS Online Help (http://localhost:631/help) | |
c41769ff | 230 | .SH COPYRIGHT |
d58c2629 | 231 | Copyright \[co] 2007-2016 by Apple Inc. |