]> git.ipfire.org Git - thirdparty/cups.git/commit - scheduler/conf.h
<rdar://problem/15939788> Improve CUPS sandboxing
authormsweet <msweet@a1ca3aef-8c08-0410-bb20-df032aa958be>
Tue, 11 Feb 2014 15:06:01 +0000 (15:06 +0000)
committermsweet <msweet@a1ca3aef-8c08-0410-bb20-df032aa958be>
Tue, 11 Feb 2014 15:06:01 +0000 (15:06 +0000)
commit8fe0183a710b1daacad419e617ddd3601085bfcf
treebb170e6ca174cb5424a3c14bdd0c50f388a45f63
parent8f787fcac9785f1d3e55440f9a99211d7bf76fad
<rdar://problem/15939788> Improve CUPS sandboxing

- Use separate profiles for filters and backends.
- Add Sandboxing configuration directive to control whether a strict or relaxed
  profile is used.
- The new strict profile is a whitelist profile that does not allow unlimited
  networking, among other things.

git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11576 a1ca3aef-8c08-0410-bb20-df032aa958be
14 files changed:
doc/help/man-cups-files.conf.html
doc/help/ref-cups-files-conf.html.in
man/cups-files.conf.man.in
scheduler/conf.c
scheduler/conf.h
scheduler/cups-exec.c
scheduler/cupsd.h
scheduler/job.c
scheduler/job.h
scheduler/main.c
scheduler/process.c
scheduler/server.c
test/run-stp-tests.sh
xcode/CUPS.xcodeproj/project.pbxproj