OLD | NEW |
---|---|
1 ;; | 1 ;; |
2 ;; Copyright (c) 2009 The Chromium Authors. All rights reserved. | 2 ;; Copyright (c) 2009 The Chromium Authors. All rights reserved. |
3 ;; Use of this source code is governed by a BSD-style license that can be | 3 ;; Use of this source code is governed by a BSD-style license that can be |
4 ;; found in the LICENSE file. | 4 ;; found in the LICENSE file. |
5 ;; | 5 ;; |
6 (version 1) | 6 (version 1) |
7 (deny default) | 7 (deny default) |
8 | 8 |
9 ; Allow sending signals to self - http://crbug.com/20370 | 9 ; Allow sending signals to self - http://crbug.com/20370 |
10 (allow %signal-self) | 10 ; ;10.5_ONLY is substitued at runtime. |
John Grabowski
2009/08/28 19:41:33
:;10.5_ONLY" is replaced with "" at runtime as nee
| |
11 ;10.5_ONLY (allow %signal-self) | |
11 | 12 |
12 ; Needed for full-page-zoomed controls - http://crbug.com/11325 | 13 ; Needed for full-page-zoomed controls - http://crbug.com/11325 |
13 (allow sysctl-read) | 14 (allow sysctl-read) |
14 | 15 |
15 ; Each line is marked with the System version that needs it. | 16 ; Each line is marked with the System version that needs it. |
16 ; This profile is tested with the following system versions: | 17 ; This profile is tested with the following system versions: |
17 ; 10.5.6, 10.6 seed release | 18 ; 10.5.6, 10.6 seed release |
18 | 19 |
19 ; Allow following symlinks | 20 ; Allow following symlinks |
20 (allow file-read-metadata) ; 10.5.6 | 21 (allow file-read-metadata) ; 10.5.6 |
21 | 22 |
22 ; Loading System Libraries. | 23 ; Loading System Libraries. |
23 (allow file-read-data (regex #"^/System/Library/Frameworks")) ; 10.5.6 | 24 (allow file-read-data (regex #"^/System/Library/Frameworks")) ; 10.5.6 |
24 (allow file-read-data (regex #"^/System/Library/PrivateFrameworks")) ; 10.5.6 | 25 (allow file-read-data (regex #"^/System/Library/PrivateFrameworks")) ; 10.5.6 |
25 (allow file-read-data (regex #"^/System/Library/CoreServices")) ; 10.5.6 | 26 (allow file-read-data (regex #"^/System/Library/CoreServices")) ; 10.5.6 |
26 | 27 |
27 ; Needed for Fonts. | 28 ; Needed for Fonts. |
28 (allow file-read-data (regex #"^/System/Library/Fonts")) ; 10.5.6 | 29 (allow file-read-data (regex #"^/System/Library/Fonts")) ; 10.5.6 |
29 (allow file-read-data (regex #"^/Library/Fonts")) ; 10.6 seed release | 30 (allow file-read-data (regex #"^/Library/Fonts")) ; 10.6 seed release |
30 (allow mach-lookup (global-name "com.apple.FontObjectsServer")) ; 10.5.6 | 31 (allow mach-lookup (global-name "com.apple.FontObjectsServer")) ; 10.5.6 |
31 (allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6 seed release | 32 (allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6 seed release |
32 | 33 |
33 ; USER_HOMEDIR is substitued at runtime - http://crbug.com/11269 | 34 ; USER_HOMEDIR is substitued at runtime - http://crbug.com/11269 |
34 (allow file-read-data (regex #"^USER_HOMEDIR/Library/Fonts")) ; 10.6 seed relea se | 35 (allow file-read-data (regex #"^USER_HOMEDIR/Library/Fonts")) ; 10.6 seed relea se |
35 | 36 |
36 ; Needed for IPC on 10.6 | 37 ; Needed for IPC on 10.6 |
37 (allow ipc-posix-shm) | 38 (allow ipc-posix-shm) |
OLD | NEW |