diff options
| author | kerrnel <kerrnel@chromium.org> | 2015-06-29 12:13:30 -0700 |
|---|---|---|
| committer | Commit bot <commit-bot@chromium.org> | 2015-06-29 19:14:03 +0000 |
| commit | 76eaa8778a322803dc3ac20cda05525e615dec4d (patch) | |
| tree | 34540032da59183a6c6139469c7aca211ab60c50 /content/ppapi_plugin | |
| parent | 0a00cadb64843e4c9bcbca4ea8edae4b2484881c (diff) | |
| download | chromium_src-76eaa8778a322803dc3ac20cda05525e615dec4d.zip chromium_src-76eaa8778a322803dc3ac20cda05525e615dec4d.tar.gz chromium_src-76eaa8778a322803dc3ac20cda05525e615dec4d.tar.bz2 | |
Refactor OS X sandbox processing and audit sandbox files
Audited the sandbox files to enusre all rules are necessary and removed
any incorrect comments.
The OS X Sandbox code is refactored to get rid of all string processing
of the raw scheme code in the sandbox profiles. By using the ability to
pass parameters into sandbox profiles, the variable substitution logic
is performed by the scheme interpreter itself.
BUG=242704
Review URL: https://codereview.chromium.org/1186233004
Cr-Commit-Position: refs/heads/master@{#336610}
Diffstat (limited to 'content/ppapi_plugin')
| -rw-r--r-- | content/ppapi_plugin/ppapi.sb | 10 |
1 files changed, 4 insertions, 6 deletions
diff --git a/content/ppapi_plugin/ppapi.sb b/content/ppapi_plugin/ppapi.sb index 9ef9d31..4493cc3 100644 --- a/content/ppapi_plugin/ppapi.sb +++ b/content/ppapi_plugin/ppapi.sb @@ -9,12 +9,10 @@ ; *** The contents of content/common/common.sb are implicitly included here. *** ; Needed for Fonts. -(allow file-read* (regex #"^/System/Library/Fonts($|/)")) ; 10.5.6 -; 10.6 for loading fonts in the renderer. -; on 10.5 this is needed for the PDF plugin. +(allow file-read* (regex #"^/System/Library/Fonts($|/)")) (allow file-read* (regex #"^/Library/Fonts($|/)")) -(allow mach-lookup (global-name "com.apple.FontObjectsServer")) ; 10.5.6 -(allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6 +(allow mach-lookup (global-name "com.apple.FontObjectsServer")) +(allow mach-lookup (global-name "com.apple.FontServer")) ; http://crbug.com/11269 -(allow file-read* (subpath "@USER_HOMEDIR_AS_LITERAL@/Library/Fonts")) ; 10.6 +(allow file-read* (subpath (user-homedir-path "/Library/Fonts"))) |