Sandbox tweaking.

ipptool man page tweak.

git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11631 a1ca3aef-8c08-0410-bb20-df032aa958be

diff --git a/man/ipptool.man b/man/ipptool.man
index 33e30f010f9dbc6c37ca3e8c9f0253bc4f9402a5..031edcefedba98c1fe215947f9b08cdbbe5491c4 100644 (file)
--- a/man/ipptool.man
+++ b/man/ipptool.man
@@ -109,17 +109,20 @@ The \fIipptool\fR program is unique to CUPS.
 .SH EXAMPLES
 Get a list of completed jobs for "myprinter":
 .nf
+
     ipptool ipp://localhost/printers/myprinter get-completed-jobs.test
 .fi
 .LP
 Send email notifications to "user@example.com" when "myprinter" changes:
 .nf
-    ipptool -d recipient=mailto:user@example.com \
+
+    ipptool -d recipient=mailto:user@example.com \\
         ipp://localhost/printers/myprinter create-printer-subscription.test
 .fi
 .SH STANDARD FILES
 The following standard files are available:
 .nf
+
     color.jpg
     create-printer-subscription.test
     document-a4.pdf

diff --git a/scheduler/process.c b/scheduler/process.c
index 1ef14cf01656576fc4ed143ef163fbe1b51dae9d..14d988760445d9a1beab337c39304073d3e3604d 100644 (file)
--- a/scheduler/process.c
+++ b/scheduler/process.c
@@ -297,14 +297,15 @@ cupsdCreateProfile(int job_id,            /* I - Job ID or 0 for none */
   {
     /* Allow TCP and UDP networking off the machine... */
     cupsFilePuts(fp, "\n       (remote tcp))\n");
+    cupsFilePuts(fp, "(allow network-bind)\n"); /* for LPD resvport */
     cupsFilePuts(fp, "(allow network*\n"
                     "       (local udp \"*:*\")\n"
                     "       (remote udp \"*:*\"))\n");
 
-    /* Also allow access to Bluetooth, USB, and SMB */
+    /* Also allow access to Bluetooth, USB, and device files */
     cupsFilePuts(fp, "(allow iokit-open)\n");
     cupsFilePuts(fp, "(allow file-write* file-read-data file-read-metadata file-ioctl\n"
-                     "       (regex #\"^/dev/nsmb[0-9]+$\"))\n");
+                     "       (regex #\"^/dev/\"))\n");
   }
   else
   {