diff options
| author | jeremy@chromium.org <jeremy@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-04-16 21:33:09 +0000 |
|---|---|---|
| committer | jeremy@chromium.org <jeremy@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-04-16 21:33:09 +0000 |
| commit | 3e21831b1796f52ae015b6dd62106830d81ebb71 (patch) | |
| tree | a8cdeccfae4eadc2b5ac1a8f3d9b4918fa0200f8 /chrome/renderer/renderer.sb | |
| parent | 1180a85e0e75826b2156caf2049d5663be6956fd (diff) | |
| download | chromium_src-3e21831b1796f52ae015b6dd62106830d81ebb71.zip chromium_src-3e21831b1796f52ae015b6dd62106830d81ebb71.tar.gz chromium_src-3e21831b1796f52ae015b6dd62106830d81ebb71.tar.bz2 | |
Fix Sandbox on SnowLeopard.
1. Punch holes in Sandbox config to accomodate changes in the Font Server.
2. Add warmup for CGImageSourceGetStatus().
3. Misc cleanup for rendererMainPlatformDelegate::PlatformInitialize() function.
Review URL: http://codereview.chromium.org/67232
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@13882 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/renderer/renderer.sb')
| -rw-r--r-- | chrome/renderer/renderer.sb | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/chrome/renderer/renderer.sb b/chrome/renderer/renderer.sb index 3b2a1fc..8bb1b3d 100644 --- a/chrome/renderer/renderer.sb +++ b/chrome/renderer/renderer.sb @@ -6,10 +6,16 @@ (version 1) (deny default) +; Each line is marked with the System version that needs it. +; This profile is tested with the following system versions: +; 10.5.6, 10.6 seed release + ; Allow following symlinks -(allow file-read-metadata) +(allow file-read-metadata) ; 10.5.6 ; Allow reading files out of /System/Library -(allow file-read-data (regex #"^/System/Library")) +(allow file-read-data (regex #"^/System/Library")) ; 10.5.6 ; Needed for Fonts -(allow mach-lookup (global-name "com.apple.FontObjectsServer")) +(allow mach-lookup (global-name "com.apple.FontObjectsServer")) ; 10.5.6 +(allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6 seed release +(allow file-read-data (regex #"^/Library/Fonts")) ; 10.6 seed release |