From: msweet <msweet@a1ca3aef-8c08-0410-bb20-df032aa958be>
Date: Wed, 20 Aug 2014 15:20:48 +0000 (+0000)
Subject: Update sandboxing documentation to indicate which directories are allowed for
X-Git-Tag: v2.2b1~519
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=abcaca5754725f083941f09bf0811216a0c6db17;p=thirdparty%2Fcups.git

Update sandboxing documentation to indicate which directories are allowed for
domain sockets.


git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12103 a1ca3aef-8c08-0410-bb20-df032aa958be
---

diff --git a/cups/api-filter.shtml b/cups/api-filter.shtml
index eb08da3b04..7c33179c8e 100644
--- a/cups/api-filter.shtml
+++ b/cups/api-filter.shtml
@@ -867,7 +867,7 @@ void *my_data;
 
 	<li>Bluetooth and USB: backends can access Bluetooth and USB printers through IOKit. <em>Filters cannot access Bluetooth and USB printers directly.</em></li>
 
-	<li>Network: filters and backends can access UNIX domain sockets under the <var>/private/var/run</var> and <var>/private/var/tmp</var> directories. Backends can also create IPv4 and IPv6 TCP (outgoing) and UDP (incoming and outgoing) socket, and bind to local source ports. <em>Filters cannot directly create IPv4 and IPv6 TCP or UDP sockets.</em></li>
+	<li>Network: filters and backends can access UNIX domain sockets under the <var>/private/tmp</var>, <var>/private/var/run</var>, and <var>/private/var/tmp</var> directories. Backends can also create IPv4 and IPv6 TCP (outgoing) and UDP (incoming and outgoing) socket, and bind to local source ports. <em>Filters cannot directly create IPv4 and IPv6 TCP or UDP sockets.</em></li>
 
 	<li>Notifications: filters and backends can send notifications via the Darwin <code>notify_post()</code> API.</li>
 
diff --git a/doc/help/api-filter.html b/doc/help/api-filter.html
index c62b6c8439..1ab935b51e 100644
--- a/doc/help/api-filter.html
+++ b/doc/help/api-filter.html
@@ -1307,7 +1307,7 @@ void *my_data;
 
 	<li>Bluetooth and USB: backends can access Bluetooth and USB printers through IOKit. <em>Filters cannot access Bluetooth and USB printers directly.</em></li>
 
-	<li>Network: filters and backends can access UNIX domain sockets under the <var>/private/var/run</var> and <var>/private/var/tmp</var> directories. Backends can also create IPv4 and IPv6 TCP (outgoing) and UDP (incoming and outgoing) socket, and bind to local source ports. <em>Filters cannot directly create IPv4 and IPv6 TCP or UDP sockets.</em></li>
+	<li>Network: filters and backends can access UNIX domain sockets under the <var>/private/tmp</var>, <var>/private/var/run</var>, and <var>/private/var/tmp</var> directories. Backends can also create IPv4 and IPv6 TCP (outgoing) and UDP (incoming and outgoing) socket, and bind to local source ports. <em>Filters cannot directly create IPv4 and IPv6 TCP or UDP sockets.</em></li>
 
 	<li>Notifications: filters and backends can send notifications via the Darwin <code>notify_post()</code> API.</li>