Security considerations

Use these precautions when installing BrightQ-Pro and configuring access to shared printers.

• Root and privileged installation: run as a privileged user only when necessary, using approved administrative methods.
• System lp/lpr replacement: consider the impact on other applications and backup/recovery before changing links.
• Passwords in CLI options or SMB URIs: avoid placing credentials in shell history, process arguments or broadly readable configuration files.
• CUPS configuration edits: use supported CUPS administration procedures, review access controls and avoid enabling file printing casually.
• Raw port 9100 and LPD: confine access to trusted networks; do not assume transport encryption or user authentication.
• Printer discovery scans: run only on networks you administer and scope IP ranges as tightly as possible.
• Operating system security: use network isolation and appropriate access controls for systems that no longer receive security updates.

In particular, do not recommend disabling host security controls such as AppArmor simply to bypass a printing issue without first identifying and correcting the permission problem.