Mac: Allow accessing various files needed by the defaults system.

chrome/renderer/renderer.sb

Index: chrome/renderer/renderer.sb
diff --git a/chrome/renderer/renderer.sb b/chrome/renderer/renderer.sb
index b2cd9bc0a3213fde58a8df9d204d648842479fda..6a0bf0d7283fc88fd242f58bcfeaac01e05d1dda 100644
--- a/chrome/renderer/renderer.sb
+++ b/chrome/renderer/renderer.sb
@@ -14,8 +14,17 @@
 (allow mach-lookup (global-name "com.apple.FontObjectsServer"))  ; 10.5.6
 ;10.6_ONLY (allow mach-lookup (global-name "com.apple.FontServer"))  ; 10.6
 
-; http://crbug.com/46648
-(allow file-read* (regex #"^/System/Library/ColorSync($|/)"))  ; 10.5.6
+(allow file-read*
+  (regex #"^/System/Library/ColorSync($|/)")  ; 10.5.6 - http://crbug.com/46648
+  (literal "/Library/Preferences/.GlobalPreferences.plist") ; http://crbug.com/60917
+  (literal "@USER_HOMEDIR_AS_LITERAL@/Library/Preferences/.GlobalPreferences.plist")
+)
 
-; USER_HOMEDIR is substitued at runtime - http://crbug.com/11269
+; http://crbug.com/11269
 ;10.6_ONLY (allow file-read* (subpath "@USER_HOMEDIR_AS_LITERAL@/Library/Fonts"))  ; 10.6
+
+; http://crbug.com/60917
+(allow file-read-metadata
+  (literal "/")
+  (literal "/var")
+)