[sane-devel] Sandboxing scanner applications

[Perry Hutchison]

[Cc's dropped, because mailman complained of too many recipients]

Bastien Nocera <hadess at hadess.net> wrote:

> ... using the "net" driver. It still requires punching a hole
> in the sandbox which shouldn't be necessary.

Why is punching a hole for network::localhost -- allowing access
(via network) only to localhost, and not to any other host -- so
much worse than punching a hole for D-bus?