[sane-devel] Everyone!

[ToddAndMargo]

Hi All,

What to I do to saned.conf to tell it I want EVERYONE to
be able to access it?

Many thanks,
-T

[ToddAndMargo]

Post by ToddAndMargo
Hi All,
What to I do to saned.conf to tell it I want EVERYONE to
be able to access it?
Many thanks,
-T

Both network users and all users in general

[Luiz Angelo Daros de Luca]

Add a single + in a line.

Post by ToddAndMargo

Post by ToddAndMargo
Hi All,
What to I do to saned.conf to tell it I want EVERYONE to
be able to access it?
Many thanks,
-T

Both network users and all users in general
--
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"

[ToddAndMargo]

Post by Luiz Angelo Daros de Luca

Post by ToddAndMargo

Post by ToddAndMargo
Hi All,
What to I do to saned.conf to tell it I want EVERYONE to
be able to access it?
Many thanks,
-T

Both network users and all users in general

Add a single + in a line.

I do not understand.

I should have said I was speaking of
/etc/sane.d/saned.conf

I am look at how to add all users and all networks. I want
everyone to be able to access the scanner.

[Olaf Meeuwissen]

Hi ToddAndMargo,

Post by ToddAndMargo

Post by Luiz Angelo Daros de Luca

Post by ToddAndMargo

Post by ToddAndMargo
Hi All,
What to I do to saned.conf to tell it I want EVERYONE to
be able to access it?

Both network users and all users in general

Add a single + in a line.

I do not understand.
I should have said I was speaking of
/etc/sane.d/saned.conf

Straight from the saned manual page in the CONFIGURATION section

CONFIGURATION
First and foremost: saned is not intended to be exposed to the
internet or other non-trusted networks. Make sure that access
is limited by tcpwrappers and/or a fire$B!>(B wall setup. Don't
depend only on saned's own authentication. Don't run saned as
root if it's not necessary. And do not install saned as setuid
root.

The saned.conf configuration file contains both options for the
daemon and the access list.

data_portrange = min_port - max_port
Specify the port range to use for the data
connection. Pick a port range between 1024 and 65535;
don't pick a too large port range, as it may have
performance issues. Use this option if your saned server
is sitting behind a firewall. If that firewall is a
Linux machine, we strongly recommend using the Netfilter
nf_conntrack_sane module instead.

The access list is a list of host names, IP addresses or IP
subnets (CIDR notation) that are permitted to use local SANE
devices. IPv6 addresses must be enclosed in brackets, and
should always be specified in their compressed
form. Connections from localhost are always permitted. Empty
lines and lines starting with a hash mark (#) are ignored. A
line containing the single character ``+'' is interpreted to
match any hostname. This allows any remote machine to use your
scanner and may present a security risk, so this shouldn't be
used unless you know what you're doing.

Post by ToddAndMargo
I am look at how to add all users and all networks. I want
everyone to be able to access the scanner.

Reading or searching the documentation might help ;-)

Hope this helps,
--
Sent with my mu4e

[ToddAndMargo]

Post by Olaf Meeuwissen
A
line containing the single character ``+'' is interpreted to
match any hostname

My firewall blocks everything from the Internet.

"A line containing the single character ``+'' is
interpreted to match any hostname"

Not sure what that means. Any IP or any host name?
Jut use a "+" on a blank line?
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Computers are like air conditioners.
They malfunction when you open windows
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Luiz Angelo Daros de Luca]

Yes

Post by ToddAndMargo

Post by Olaf Meeuwissen
A
line containing the single character ``+'' is interpreted to
match any hostname

My firewall blocks everything from the Internet.
"A line containing the single character ``+'' is
interpreted to match any hostname"
Not sure what that means. Any IP or any host name?
Jut use a "+" on a blank line?
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Computers are like air conditioners.
They malfunction when you open windows
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"

[ToddAndMargo]

Post by Olaf Meeuwissen

Post by Olaf Meeuwissen
A
line containing the single character ``+'' is

interpreted to

Post by Olaf Meeuwissen
match any hostname

My firewall blocks everything from the Internet.
"A line containing the single character ``+'' is
interpreted to match any hostname"
Not sure what that means. Any IP or any host name?
Jut use a "+" on a blank line?

Yes

Thank you. I was overthinking it.

I wish the man page would stop using "hostname" in place
of IP address.

[ToddAndMargo]

Post by ToddAndMargo

Hi,

Post by Olaf Meeuwissen
Straight from the saned manual page in the CONFIGURATION section

                  ^^^^^^^^^^^^^^^^^^^^^

There is no "man saned.conf" manual page.  Which one are you
referring to?  "man saned"?

I thought I was being clear enough.

Thank you.

If you are curious, this is the manual I have been using:

https://www.mankier.com/8/saned#Systemd_configuration_for_saned_with_systemd_support_compiled_in

So far, I do believe I have uncovered an error, but I
will wait till I get this dog to hunt before mentioning
it.

Red Hat found a booboo in its RPM:
https://bugzilla.redhat.com/show_bug.cgi?id=1512252#c20