summaryrefslogtreecommitdiffstats
path: root/chrome/renderer/renderer.sb
diff options
context:
space:
mode:
Diffstat (limited to 'chrome/renderer/renderer.sb')
-rw-r--r--chrome/renderer/renderer.sb15
1 files changed, 15 insertions, 0 deletions
diff --git a/chrome/renderer/renderer.sb b/chrome/renderer/renderer.sb
new file mode 100644
index 0000000..3b2a1fc
--- /dev/null
+++ b/chrome/renderer/renderer.sb
@@ -0,0 +1,15 @@
+;;
+;; Copyright (c) 2009 The Chromium Authors. All rights reserved.
+;; Use of this source code is governed by a BSD-style license that can be
+;; found in the LICENSE file.
+;;
+(version 1)
+(deny default)
+
+; Allow following symlinks
+(allow file-read-metadata)
+; Allow reading files out of /System/Library
+(allow file-read-data (regex #"^/System/Library"))
+
+; Needed for Fonts
+(allow mach-lookup (global-name "com.apple.FontObjectsServer"))