More sandbox tweaks.

git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11661 a1ca3aef-8c08-0410-bb20-df032aa958be

diff --git a/scheduler/process.c b/scheduler/process.c
index a4a50cb1f2217ac21c0a7a5bb3cc63d3df9253e8..6a9564929b1d0d6258e11c06f87df55a60b5af7d 100644 (file)
--- a/scheduler/process.c
+++ b/scheduler/process.c
@@ -303,10 +303,11 @@ cupsdCreateProfile(int job_id,            /* I - Job ID or 0 for none */
                     "       (local udp \"*:*\")\n"
                     "       (remote udp \"*:*\"))\n");
 
-    /* Also allow access to Bluetooth, USB, and device files */
+    /* Also allow access to Bluetooth, USB, device files, etc. */
     cupsFilePuts(fp, "(allow iokit-open)\n");
     cupsFilePuts(fp, "(allow file-write* file-read-data file-read-metadata file-ioctl\n"
                      "       (regex #\"^/dev/\"))\n");
+    cupsFilePuts(fp, "(allow distributed-notification-post)\n");
   }
   else
   {