From: msweet <msweet@a1ca3aef-8c08-0410-bb20-df032aa958be>
Date: Tue, 17 Jun 2014 21:31:46 +0000 (+0000)
Subject: Allow domain sockets in /private/tmp.
X-Git-Tag: v2.2b1~600
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=1d8db48d90c456df721685fee008ebee27a7e1eb;p=thirdparty%2Fcups.git

Allow domain sockets in /private/tmp.


git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11935 a1ca3aef-8c08-0410-bb20-df032aa958be
---

diff --git a/scheduler/process.c b/scheduler/process.c
index 5c4875f965..57448c57ff 100644
--- a/scheduler/process.c
+++ b/scheduler/process.c
@@ -190,9 +190,13 @@ cupsdCreateProfile(int job_id,		/* I - Job ID or 0 for none */
                  " #\"^/private$\""
                  " #\"^/private/etc$\""
                  " #\"^/private/etc/\""
+                 " #\"^/private/tmp$\""
+                 " #\"^/private/tmp/\""
                  " #\"^/private/var$\""
                  " #\"^/private/var/db$\""
                  " #\"^/private/var/folders$\""
+                 " #\"^/private/var/run$\""
+                 " #\"^/private/var/run/\""
                  " #\"^/private/var/spool$\""
                  " #\"^/usr/bin$\""	/* /usr/bin */
                  " #\"^/usr/bin/\""	/* /usr/bin/... */
@@ -294,7 +298,7 @@ cupsdCreateProfile(int job_id,		/* I - Job ID or 0 for none */
   }
   /* Allow outbound networking to local services */
   cupsFilePuts(fp, "(allow network-outbound"
-		   "\n       (regex #\"^/private/var/run/\")");
+		   "\n       (regex #\"^/private/var/run/\" #\"^/private/tmp/\")");
   for (lis = (cupsd_listener_t *)cupsArrayFirst(Listeners);
        lis;
        lis = (cupsd_listener_t *)cupsArrayNext(Listeners))