[MacPorts] #45006: cups-pdf sandbox issues in yosemite

[MacPorts]

#45006: cups-pdf sandbox issues in yosemite
----------------------+--------------------------------
 Reporter:  jasonw@…  |      Owner:  macports-tickets@…
     Type:  defect    |     Status:  new
 Priority:  Normal    |  Milestone:
Component:  ports     |    Version:  2.3.1
 Keywords:  yosemite  |       Port:  cups-pdf
----------------------+--------------------------------
 Installed cups-pdf under Yosemite DP 8 (14A361c), following all
 directions. When I try to add the printer, no entry for cups-pdf shows.

 Log shows this line:

 {{{
 sandboxd[269] ([23432]): cups-deviced(23432) deny file-read-metadata
 /opt/local/libexec/cups/backend/cups-pdf
 }}}

 To test, I tried replacing the link in /usr/libexec/cups/backend with the
 actual file (and chown root:wheel, chmod 700 for good measure).

 Still, no printer shows up, and log displays:

 {{{
 sandboxd[269] ([23577]): cups-pdf(23577) deny file-read-metadata
 /opt/local/etc/cups/cups-pdf.conf
 sandboxd[269] ([23577]): cups-pdf(23577) deny file-read-metadata
 /opt/local/var/log/cups
 --- last message repeated 1 time ---
 sandboxd[269] ([23577]): cups-pdf(23577) deny file-read-metadata
 /opt/local/var/log
 sandboxd[269] ([23577]): cups-pdf(23577) deny file-read-metadata
 /opt/local/var
 sandboxd[269] ([23577]): cups-pdf(23577) deny file-read-metadata
 /opt/local
 sandboxd[269] ([23577]): cups-pdf(23577) deny file-read-metadata /opt
 }}}

 Sandbox no longer complains about the backend, but now it disallows access
 to the config and log files.

-- 
Ticket URL: <https://trac.macports.org/ticket/45006>
MacPorts <http://www.macports.org/>
Ports system for OS X