From 3e21831b1796f52ae015b6dd62106830d81ebb71 Mon Sep 17 00:00:00 2001 From: "jeremy@chromium.org" <jeremy@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> Date: Thu, 16 Apr 2009 21:33:09 +0000 Subject: Fix Sandbox on SnowLeopard. 1. Punch holes in Sandbox config to accomodate changes in the Font Server. 2. Add warmup for CGImageSourceGetStatus(). 3. Misc cleanup for rendererMainPlatformDelegate::PlatformInitialize() function. Review URL: http://codereview.chromium.org/67232 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@13882 0039d316-1c4b-4281-b951-d872f2087c98 --- chrome/renderer/renderer.sb | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) (limited to 'chrome/renderer/renderer.sb') diff --git a/chrome/renderer/renderer.sb b/chrome/renderer/renderer.sb index 3b2a1fc..8bb1b3d 100644 --- a/chrome/renderer/renderer.sb +++ b/chrome/renderer/renderer.sb @@ -6,10 +6,16 @@ (version 1) (deny default) +; Each line is marked with the System version that needs it. +; This profile is tested with the following system versions: +; 10.5.6, 10.6 seed release + ; Allow following symlinks -(allow file-read-metadata) +(allow file-read-metadata) ; 10.5.6 ; Allow reading files out of /System/Library -(allow file-read-data (regex #"^/System/Library")) +(allow file-read-data (regex #"^/System/Library")) ; 10.5.6 ; Needed for Fonts -(allow mach-lookup (global-name "com.apple.FontObjectsServer")) +(allow mach-lookup (global-name "com.apple.FontObjectsServer")) ; 10.5.6 +(allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6 seed release +(allow file-read-data (regex #"^/Library/Fonts")) ; 10.6 seed release -- cgit v1.1