Add CoreFoundation sandbox rules to CUPS sandbox profiles.

diff --git a/scheduler/process.c b/scheduler/process.c
index 27e8010f8f9440752d3188f839f45309750b038a..584b82e8c9b65ef06e2301c4fc1b3c6f79aba853 100644 (file)
--- a/scheduler/process.c
+++ b/scheduler/process.c
@@ -125,6 +125,7 @@ cupsdCreateProfile(int job_id,              /* I - Job ID or 0 for none */
   if (LogLevel >= CUPSD_LOG_DEBUG)
     cupsFilePuts(fp, "(debug deny)\n");
   cupsFilePuts(fp, "(import \"system.sb\")\n");
+  cupsFilePuts(fp, "(import \"com.apple.corefoundation.sb\")\n");
   cupsFilePuts(fp, "(system-network)\n");
   cupsFilePuts(fp, "(allow mach-per-user-lookup)\n");
   cupsFilePuts(fp, "(allow ipc-posix-sem)\n");