


saned(1)                                                 saned(1)


NNAAMMEE
       saned - SANE network daemon

SSYYNNOOPPSSIISS
       ssaanneedd [--dd [_n]]

DDEESSCCRRIIPPTTIIOONN
       ssaanneedd  is  the  SANE (Scanner Access Now Easy) daemon that
       allows remote clients to access image acquisition  devices
       available on the local host.

OOPPTTIIOONNSS
       The  --dd  flag  request  that  ssaanneedd  run in debug mode (as
       opposed to iinneettdd(8) mode).  In this mode, ssaanneedd explicitly
       waits for a connection request.  When compiled with debug-
       ging enabled, this flag may be followed  by  a  number  to
       request  debug info.  The larger the number, the more ver-
       bose the debug output.  E.g., -d128 will request  printing
       of all debug info.

CCOONNFFIIGGUURRAATTIIOONN
       First  and foremost: please do _n_o_t install ssaanneedd as setuid
       root without due  consideration.   Especially  when  using
       dynamic  linking,  there  is  a  potential for introducing
       security holes when running this program as root.

       The contents of the _s_a_n_e_d_._c_o_n_f file  is  a  list  of  host
       names that are permitted to use local SANE devices.  Empty
       lines and lines starting with a hash mark (#) are ignored.
       A  line  containing  the  single character ``+'' is inter-
       preted to match any  hostname.   This  allows  any  remote
       machine  to  use  your  scanner and may present a security
       risk, so this shouldn't  be  used  unless  you  know  what
       you're doing.  A sample configuration file is shown below:

              scan-client.somedomain.firm
              # this is a comment
              localhost

       The case of the host names does not matter,  so  AHost.COM
       is considered identical to ahost.com.

       For  ssaanneedd to work properly, it is also necessary to add a
       configuration line to _/_e_t_c_/_i_n_e_t_d_._c_o_n_f.  The  configuration
       line normally looks like this:

              sane      stream     tcp     nowait     saned.saned
              /usr/local/sbin/saned saned

       However, if your system uses ttccppdd(8) for additional  secu-
       rity  screening, you may want to disable saned access con-
       trol by putting ``+'' in _s_a_n_e_d_._c_o_n_f and use a line of  the
       following form in _/_e_t_c_/_i_n_e_t_d_._c_o_n_f instead:




                            2 Apr 1999                          1





saned(1)                                                 saned(1)


              sane  stream  tcp nowait saned.saned /usr/sbin/tcpd
              saned

       Note that both examples assume that there is a ssaanneedd group
       and a ssaanneedd user.  If you follow this example, please make
       sure that the access permissions on the special device are
       set  such  that  ssaanneedd can access the scanner (the program
       generally needs read and write access to scanner devices).

       Finally, it is also necessary to add a line of the follow-
       ing form to _/_e_t_c_/_s_e_r_v_i_c_e_s:

              sane 6566/tcp # SANE network scanner daemon

       Note  that  port  number  6566  has  not  been  officially
       assigned  to the SANE network protocol and may thus change
       in the future.


FFIILLEESS
       _/_e_t_c_/_h_o_s_t_s_._e_q_u_i_v
              The hosts listed in  this  file  are  permitted  to
              access  all  local SANE devices.  Caveat: this file
              imposes serious security risks and its use  is  not
              recommended.

       _/_u_s_r_/_l_o_c_a_l_/_e_t_c_/_s_a_n_e_._d_/_s_a_n_e_d_._c_o_n_f
              Contains  a list of hosts permitted to access local
              SANE devices (see  also  description  of  SSAANNEE__CCOONN--
              FFIIGG__DDIIRR below).

EENNVVIIRROONNMMEENNTT
       SSAANNEE__CCOONNFFIIGG__DDIIRR
              This  environment  variable  specifies  the list of
              directories  that  may  contain  the  configuration
              file.  Under UNIX, the directories are separated by
              a colon (`:'), under OS/2, they are separated by  a
              semi-colon (`;').  If this variable is not set, the
              configuration  file  is  searched  in  two  default
              directories:  first,  the current working directory
              (".") and then in  /usr/local/etc/sane.d.   If  the
              value  of  the  environment  variable ends with the
              directory separator  character,  then  the  default
              directories are searched after the explicitly spec-
              ified directories.  For example, setting  SSAANNEE__CCOONN--
              FFIIGG__DDIIRR  to "/tmp/config:" would result in directo-
              ries "tmp/config", ".", and "/usr/local/etc/sane.d"
              being searched (in this order).


SSEEEE AALLSSOO
       scanimage(1),    xscanimage(1),    xcam(1),   sane-dll(5),
       sane-hp(5),  sane-mustek(5),   sane-net(5),   sane-pnm(5),
       sane-pint(5), sane-qcam(5), sane-umax(5)



                            2 Apr 1999                          2





saned(1)                                                 saned(1)


AAUUTTHHOORR
       David Mosberger























































                            2 Apr 1999                          3


