[sane-devel] Sandboxing scanner applications

Alexander Pevzner pzz at apevzner.com
Sat Sep 19 12:42:24 BST 2020

On 9/19/20 12:25 PM, Bastien Nocera wrote:
> Sealed memfds, passed via D-Bus, that's 1/2GB in all :)

If D-Bus can pass an arbitrary file descriptor, it can be used to pass 
AF_UNIX socket, allowing usage of "network" transport without actual 
access to networking, and saving 1/2GB of memfs :-)


	Wishes, Alexander Pevzner (pzz at apevzner.com)

More information about the sane-devel mailing list