diff options
| author | msneck@google.com <msneck@google.com@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-07-28 13:59:41 +0000 |
|---|---|---|
| committer | msneck@google.com <msneck@google.com@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-07-28 13:59:41 +0000 |
| commit | a719e0b0f1332b7eabd27e769f442f95c034ee9c (patch) | |
| tree | 7010ea5429f4d7d0ccf92d64786fbfb5aa5dbaf6 /chrome/renderer/renderer.sb | |
| parent | c9b569337a250250ba730fa50c389c18e87915c8 (diff) | |
| download | chromium_src-a719e0b0f1332b7eabd27e769f442f95c034ee9c.zip chromium_src-a719e0b0f1332b7eabd27e769f442f95c034ee9c.tar.gz chromium_src-a719e0b0f1332b7eabd27e769f442f95c034ee9c.tar.bz2 | |
Fully remove the hole in the Mac Sandbox that was used to support
Native Client. This removes the special sandbox commands as well
as all special code.
This CL replaces http://codereview.chromium.org/2881016/show which
was rolled back because of problems on Mac OS X 10.5. Those problems
were addressed in Native Client and pulled into Chrome with a DEPS
file update in http://codereview.chromium.org/2881034/show which was
committed as Chrome revision 53711.
BUG=http://code.google.com/p/nativeclient/issues/detail?id=344
TEST=all tests pass, including nacl_ui_tests
Review URL: http://codereview.chromium.org/3077003
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@53936 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/renderer/renderer.sb')
| -rw-r--r-- | chrome/renderer/renderer.sb | 14 |
1 files changed, 0 insertions, 14 deletions
diff --git a/chrome/renderer/renderer.sb b/chrome/renderer/renderer.sb index 4165162..9c075b4 100644 --- a/chrome/renderer/renderer.sb +++ b/chrome/renderer/renderer.sb @@ -19,17 +19,3 @@ ; USER_HOMEDIR is substitued at runtime - http://crbug.com/11269 ;10.6_ONLY (allow file-read-data (subpath "USER_HOMEDIR/Library/Fonts")) ; 10.6 - -; Needed for the Native Client plugin and loader. These lines are enabled -; if and only if --internal-nacl (or --enable-nacl) are used (and they -; are off by default). -; TODO(msneck): Refactor Native Client to use something other than Unix -; sockets. Then change or remove the code in chrome/common/sandbox_mac.mm -; which deals with the ";NACL" prefix. -; See http://code.google.com/p/nativeclient/issues/detail?id=344 -;NACL;BEFORE_10.6 (allow network-inbound (from unix-socket)) -;NACL;BEFORE_10.6 (allow network-outbound (to unix-socket)) -;NACL;10.6_ONLY (allow network-inbound (regex #"^(/private)?/tmp/nacl-")) -;NACL;10.6_ONLY (allow network-outbound (regex #"^(/private)?/tmp/nacl-")) -;NACL;10.6_ONLY (allow network-bind (local ip4)) -;NACL;10.6_ONLY (allow file-write* (regex #"^(/private)?/tmp/nacl-"))
\ No newline at end of file |