diff options
Diffstat (limited to 'chrome/common/common.sb')
| -rw-r--r-- | chrome/common/common.sb | 12 |
1 files changed, 5 insertions, 7 deletions
diff --git a/chrome/common/common.sb b/chrome/common/common.sb index f8d4f1c..4b5c4f5 100644 --- a/chrome/common/common.sb +++ b/chrome/common/common.sb @@ -11,7 +11,7 @@ ; printing on sandbox exceptions; this functionality only exists on 10.6. The ; --enable-sandbox-logging flag or system versions <10.6 cause this flag to ; expand to an empty string. http://crbug.com/26621 -(deny default DISABLE_SANDBOX_DENIAL_LOGGING) +(deny default @DISABLE_SANDBOX_DENIAL_LOGGING@) ; Support for programmatically enabling verbose debugging. ;ENABLE_LOGGING (debug deny) @@ -26,13 +26,11 @@ ; This profile is tested with the following system versions: ; 10.5.6, 10.6 -; Allow following symlinks -(allow file-read-metadata) ; 10.5.6 - ; Loading System Libraries. -(allow file-read-data (regex #"^/System/Library/Frameworks($|/)")) ; 10.5.6 -(allow file-read-data (regex #"^/System/Library/PrivateFrameworks($|/)")) ; 10.5.6 -(allow file-read-data (regex #"^/System/Library/CoreServices($|/)")) ; 10.5.6 +(allow file-read* + (regex #"^/System/Library/Frameworks($|/)") + (regex #"^/System/Library/PrivateFrameworks($|/)") + (regex #"^/System/Library/CoreServices($|/)")) ; 10.5.6 ; Needed for IPC on 10.6 ;10.6_ONLY (allow ipc-posix-shm)
\ No newline at end of file |