Allow domain sockets in /private/tmp.

git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11935 a1ca3aef-8c08-0410-bb20-df032aa958be

diff --git a/scheduler/process.c b/scheduler/process.c
index 5c4875f96513c68526218857b6a531a9f94e0a28..57448c57ffb324b53f61f3bb80ad370733771705 100644 (file)
--- a/scheduler/process.c
+++ b/scheduler/process.c
@@ -190,9 +190,13 @@ cupsdCreateProfile(int job_id,             /* I - Job ID or 0 for none */
                  " #\"^/private$\""
                  " #\"^/private/etc$\""
                  " #\"^/private/etc/\""
+                 " #\"^/private/tmp$\""
+                 " #\"^/private/tmp/\""
                  " #\"^/private/var$\""
                  " #\"^/private/var/db$\""
                  " #\"^/private/var/folders$\""
+                 " #\"^/private/var/run$\""
+                 " #\"^/private/var/run/\""
                  " #\"^/private/var/spool$\""
                  " #\"^/usr/bin$\""    /* /usr/bin */
                  " #\"^/usr/bin/\""    /* /usr/bin/... */
@@ -294,7 +298,7 @@ cupsdCreateProfile(int job_id,              /* I - Job ID or 0 for none */
   }
   /* Allow outbound networking to local services */
   cupsFilePuts(fp, "(allow network-outbound"
-                  "\n       (regex #\"^/private/var/run/\")");
+                  "\n       (regex #\"^/private/var/run/\" #\"^/private/tmp/\")");
   for (lis = (cupsd_listener_t *)cupsArrayFirst(Listeners);
        lis;
        lis = (cupsd_listener_t *)cupsArrayNext(Listeners))