[sane-devel] Sandboxing scanner applications

[Alexander Pevzner]

On 9/19/20 12:25 PM, Bastien Nocera wrote:
> Sealed memfds, passed via D-Bus, that's 1/2GB in all :)

If D-Bus can pass an arbitrary file descriptor, it can be used to pass 
AF_UNIX socket, allowing usage of "network" transport without actual 
access to networking, and saving 1/2GB of memfs :-)

-- 

	Wishes, Alexander Pevzner (pzz at apevzner.com)