--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/components/cups/patches/19-14850597.patch	Mon Jan 07 21:53:27 2013 -0800
@@ -0,0 +1,55 @@
+--- scheduler/ipp.c	Fri Jan  4 02:15:27 2013
++++ scheduler/ipp.c	Fri Jan  4 02:14:58 2013
+@@ -1510,6 +1510,52 @@
+   }
+ #endif /* HAVE_SSL */
+ 
++#if defined(HAVE_TSOL)
++  if (is_system_labeled() != 0) {
++    ipp_attribute_t *uattr;
++    uattr = ippFindAttribute(con->request, "requesting-user-name", IPP_TAG_NAME);
++    if (uattr) {
++      /* check for 'nolabels' in request */
++      if (ippFindAttribute(con->request, "labels", IPP_TAG_ZERO) != NULL) {
++        /* check if user is authorized */
++        if (chkauthattr("solaris.print.unlabeled", uattr->values[0].string.text) == 0) {
++          /*
++           * print request will fail since user
++           * does not have the required authorization.
++           */
++	  cups_audit_print_request_denial(con, NULL, printer, -1, EACCES);
++	  send_http_error(con, HTTP_UNAUTHORIZED, printer);
++	  return (NULL);
++        }
++      }
++
++      /*
++       * check for nobanner.
++       * '-o job-sheets=none,none' means
++       *  user does not want to print banner and trailer page.
++       */
++      if ((attr = ippFindAttribute(con->request, "job-sheets",
++          IPP_TAG_ZERO)) != NULL) {
++        if (strcmp(attr->values[0].string.text, "none") == 0) {
++          /*
++           * User wants no banner.
++           * Check if user is authorized.
++           */
++          if (chkauthattr("solaris.print.nobanner", uattr->values[0].string.text) == 0) {
++            /*
++             * print request will fail since user
++             * does not have the required authorization.
++             */
++            cups_audit_print_request_denial(con, NULL, printer, -1, EACCES);
++            send_http_error(con, HTTP_UNAUTHORIZED, printer);
++            return (NULL);
++          }
++        }
++      } 
++    }
++  }
++#endif /* HAVE_TSOL */
++
+  /*
+   * See if the printer is accepting jobs...
+   */