This appendix provides a security note related to the configuration of printers on Windows network shares.
Windows network shares are also referred to as Samba or SMB shares. When you configure a printer on an SMB share, you must enter a username and password for the print queue.
The username and password for the print queue is stored as unencrypted text in the file /etc/cups/printers.conf. This file has read-only permissions for users with root privileges, so any user with root privileges can read the username and password for the print queue.
To reduce the impact of possible security violations, ensure that the username and password required to access the print queue is used only for the print queue. This ensures that any possible security violation is restricted to unauthorized use of the print queue.