[sane-devel] Sandboxing scanner applications

[Alexander Pevzner]

On 9/19/20 11:57 AM, Bastien Nocera wrote:
> D-Bus traffic is filtered, and we can select which services the
> application has access to. By default, only portals are accessible,
> nothing else, greatly reducing potential security and privacy issues.

How do you plan to receive scanned images from scanner?

Note, A4 color image at 1200 DPI is slightly less that 1/2 Gb. SANE 
returns image uncompressed, so you probably need 1/2 Gb in scan server, 
1/2 Gb in D-Bus daemon and 1/2 Gb in receiving application.

And there are also larger paper sizes that A4, and higher resolutions 
that 1200.

By contrast, if you are using some transport that allows streaming, and 
sane driver is well-written (i.e., it uncompresses the received image 
line-by-line, not entire image at once), you only need few tens of 
kilobytes to perform the image transfer.

Note, Linux Printing is different from Linux scanning in that aspect, 
that images sent to printer are usually compressed.

-- 

	Wishes, Alexander Pevzner (pzz at apevzner.com)