summaryrefslogtreecommitdiffstats
path: root/chrome/renderer/renderer.sb
diff options
context:
space:
mode:
authorjeremy@chromium.org <jeremy@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2010-11-07 05:45:05 +0000
committerjeremy@chromium.org <jeremy@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2010-11-07 05:45:05 +0000
commit620bafaf8eed7a51a496fbfd59ec3e95d2a90fa6 (patch)
tree40558b96404df0a1f4e0cdbea3956e5c67bc240b /chrome/renderer/renderer.sb
parent61f25cd0eac69e1e0435e9c1875a6d92154c21e7 (diff)
downloadchromium_src-620bafaf8eed7a51a496fbfd59ec3e95d2a90fa6.zip
chromium_src-620bafaf8eed7a51a496fbfd59ec3e95d2a90fa6.tar.gz
chromium_src-620bafaf8eed7a51a496fbfd59ec3e95d2a90fa6.tar.bz2
Mac: Allow statting various files needed for use by the defaults system.
This CL allows statting the following files: 1) '/' 2) '/var' And full read access for various paths where .GlobalPreferences.plist may be present. The first 2 seem harmless to unblock and the 3rd is used by the default system. Bug=60917 TEST=Repro steps in bug. Cleanup: Remove stale TODO The code in question is no longer needed since Skia has changed to remove the #define in question. BUG=None TEST=Compilation shouldn't break Review URL: http://codereview.chromium.org/4134007 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@65331 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/renderer/renderer.sb')
-rw-r--r--chrome/renderer/renderer.sb15
1 files changed, 12 insertions, 3 deletions
diff --git a/chrome/renderer/renderer.sb b/chrome/renderer/renderer.sb
index b2cd9bc..6a0bf0d 100644
--- a/chrome/renderer/renderer.sb
+++ b/chrome/renderer/renderer.sb
@@ -14,8 +14,17 @@
(allow mach-lookup (global-name "com.apple.FontObjectsServer")) ; 10.5.6
;10.6_ONLY (allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6
-; http://crbug.com/46648
-(allow file-read* (regex #"^/System/Library/ColorSync($|/)")) ; 10.5.6
+(allow file-read*
+ (regex #"^/System/Library/ColorSync($|/)") ; 10.5.6 - http://crbug.com/46648
+ (literal "/Library/Preferences/.GlobalPreferences.plist") ; http://crbug.com/60917
+ (literal "@USER_HOMEDIR_AS_LITERAL@/Library/Preferences/.GlobalPreferences.plist")
+)
-; USER_HOMEDIR is substitued at runtime - http://crbug.com/11269
+; http://crbug.com/11269
;10.6_ONLY (allow file-read* (subpath "@USER_HOMEDIR_AS_LITERAL@/Library/Fonts")) ; 10.6
+
+; http://crbug.com/60917
+(allow file-read-metadata
+ (literal "/")
+ (literal "/var")
+)