summaryrefslogtreecommitdiffstats
path: root/chrome/browser/nacl_loader.sb
diff options
context:
space:
mode:
authorrohitrao@chromium.org <rohitrao@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2010-07-19 00:52:09 +0000
committerrohitrao@chromium.org <rohitrao@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2010-07-19 00:52:09 +0000
commit87f59d48a8c90999ce33ba414435fae0e32e2f0c (patch)
tree9043699619840f869b7191b66fa7968df84c9801 /chrome/browser/nacl_loader.sb
parentbd5ef825f5ba6517a0a6a2cfb8ebcb09134efe74 (diff)
downloadchromium_src-87f59d48a8c90999ce33ba414435fae0e32e2f0c.zip
chromium_src-87f59d48a8c90999ce33ba414435fae0e32e2f0c.tar.gz
chromium_src-87f59d48a8c90999ce33ba414435fae0e32e2f0c.tar.bz2
Revert 52872 - Remove the special hole that was opened for Native Client
in order for it to do bind() and connect(). BUG=http://code.google.com/p/chromium/issues/detail?id=26781 TEST=all tests pass, especially nacl_ui_tests Review URL: http://codereview.chromium.org/2881016 TBR=msneck@google.com Review URL: http://codereview.chromium.org/2842059 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@52878 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/browser/nacl_loader.sb')
-rw-r--r--chrome/browser/nacl_loader.sb11
1 files changed, 11 insertions, 0 deletions
diff --git a/chrome/browser/nacl_loader.sb b/chrome/browser/nacl_loader.sb
index 38cb29c..6c476d7 100644
--- a/chrome/browser/nacl_loader.sb
+++ b/chrome/browser/nacl_loader.sb
@@ -12,3 +12,14 @@
; Allow a Native Client application to use semaphores, specifically
; sem_init(), et.al.
(allow ipc-posix-sem)
+
+; Needed for the Native Client plugin and loader.
+; TODO(msneck): Refactor Native Client to use something other than Unix
+; sockets.
+; See http://code.google.com/p/nativeclient/issues/detail?id=344
+;BEFORE_10.6 (allow network-inbound (from unix-socket))
+;BEFORE_10.6 (allow network-outbound (to unix-socket))
+;10.6_ONLY (allow network-inbound (regex #"^(/private)?/tmp/nacl-"))
+;10.6_ONLY (allow network-outbound (regex #"^(/private)?/tmp/nacl-"))
+;10.6_ONLY (allow network-bind (local ip4))
+;10.6_ONLY (allow file-write* (regex #"^(/private)?/tmp/nacl-"))