From 3e21831b1796f52ae015b6dd62106830d81ebb71 Mon Sep 17 00:00:00 2001
From: "jeremy@chromium.org"
 <jeremy@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>
Date: Thu, 16 Apr 2009 21:33:09 +0000
Subject: Fix Sandbox on SnowLeopard. 1. Punch holes in Sandbox config to
 accomodate changes in the Font Server. 2. Add warmup for
 CGImageSourceGetStatus(). 3. Misc cleanup for
 rendererMainPlatformDelegate::PlatformInitialize() function.

Review URL: http://codereview.chromium.org/67232

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@13882 0039d316-1c4b-4281-b951-d872f2087c98
---
 chrome/renderer/renderer.sb | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

(limited to 'chrome/renderer/renderer.sb')

diff --git a/chrome/renderer/renderer.sb b/chrome/renderer/renderer.sb
index 3b2a1fc..8bb1b3d 100644
--- a/chrome/renderer/renderer.sb
+++ b/chrome/renderer/renderer.sb
@@ -6,10 +6,16 @@
 (version 1)
 (deny default)
 
+; Each line is marked with the System version that needs it.
+; This profile is tested with the following system versions:
+;     10.5.6, 10.6 seed release
+
 ; Allow following symlinks
-(allow file-read-metadata)
+(allow file-read-metadata)  ; 10.5.6
 ; Allow reading files out of /System/Library
-(allow file-read-data (regex #"^/System/Library"))
+(allow file-read-data (regex #"^/System/Library"))  ; 10.5.6
 
 ; Needed for Fonts
-(allow mach-lookup (global-name "com.apple.FontObjectsServer"))
+(allow mach-lookup (global-name "com.apple.FontObjectsServer"))  ; 10.5.6
+(allow mach-lookup (global-name "com.apple.FontServer"))  ; 10.6 seed release
+(allow file-read-data (regex #"^/Library/Fonts"))  ; 10.6 seed release
-- 
cgit v1.1