Update sandboxing documentation to indicate which directories are allowed for

domain sockets.

git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12103 a1ca3aef-8c08-0410-bb20-df032aa958be

diff --git a/cups/api-filter.shtml b/cups/api-filter.shtml
index eb08da3b0469061fe4227c273e70f741f434d321..7c33179c8ea1962587fb28dab96fa9876e48b559 100644 (file)
--- a/cups/api-filter.shtml
+++ b/cups/api-filter.shtml
@@ -867,7 +867,7 @@ void *my_data;
 
        <li>Bluetooth and USB: backends can access Bluetooth and USB printers through IOKit. <em>Filters cannot access Bluetooth and USB printers directly.</em></li>
 
-       <li>Network: filters and backends can access UNIX domain sockets under the <var>/private/var/run</var> and <var>/private/var/tmp</var> directories. Backends can also create IPv4 and IPv6 TCP (outgoing) and UDP (incoming and outgoing) socket, and bind to local source ports. <em>Filters cannot directly create IPv4 and IPv6 TCP or UDP sockets.</em></li>
+       <li>Network: filters and backends can access UNIX domain sockets under the <var>/private/tmp</var>, <var>/private/var/run</var>, and <var>/private/var/tmp</var> directories. Backends can also create IPv4 and IPv6 TCP (outgoing) and UDP (incoming and outgoing) socket, and bind to local source ports. <em>Filters cannot directly create IPv4 and IPv6 TCP or UDP sockets.</em></li>
 
        <li>Notifications: filters and backends can send notifications via the Darwin <code>notify_post()</code> API.</li>
 

diff --git a/doc/help/api-filter.html b/doc/help/api-filter.html
index c62b6c84391db51dbe72c5139636a726b7c5ee48..1ab935b51e17087b822f70e1c60d439f276baddc 100644 (file)
--- a/doc/help/api-filter.html
+++ b/doc/help/api-filter.html
@@ -1307,7 +1307,7 @@ void *my_data;
 
        <li>Bluetooth and USB: backends can access Bluetooth and USB printers through IOKit. <em>Filters cannot access Bluetooth and USB printers directly.</em></li>
 
-       <li>Network: filters and backends can access UNIX domain sockets under the <var>/private/var/run</var> and <var>/private/var/tmp</var> directories. Backends can also create IPv4 and IPv6 TCP (outgoing) and UDP (incoming and outgoing) socket, and bind to local source ports. <em>Filters cannot directly create IPv4 and IPv6 TCP or UDP sockets.</em></li>
+       <li>Network: filters and backends can access UNIX domain sockets under the <var>/private/tmp</var>, <var>/private/var/run</var>, and <var>/private/var/tmp</var> directories. Backends can also create IPv4 and IPv6 TCP (outgoing) and UDP (incoming and outgoing) socket, and bind to local source ports. <em>Filters cannot directly create IPv4 and IPv6 TCP or UDP sockets.</em></li>
 
        <li>Notifications: filters and backends can send notifications via the Darwin <code>notify_post()</code> API.</li>