Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(568)

Side by Side Diff: content/renderer/renderer.sb

Issue 7060002: Mac: Fix WebGL in OS X 10.7 + misc. Sandbox cleanup (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Created 9 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« content/common/sandbox_mac.mm ('K') | « content/common/sandbox_mac.mm ('k') | no next file » | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 ;; 1 ;;
2 ;; Copyright (c) 2011 The Chromium Authors. All rights reserved. 2 ;; Copyright (c) 2011 The Chromium Authors. All rights reserved.
3 ;; Use of this source code is governed by a BSD-style license that can be 3 ;; Use of this source code is governed by a BSD-style license that can be
4 ;; found in the LICENSE file. 4 ;; found in the LICENSE file.
5 ;; 5 ;;
6 6
7 ; *** The contents of content/common/common.sb are implicitly included here. *** 7 ; *** The contents of content/common/common.sb are implicitly included here. ***
8 8
9 ; Needed for Fonts. 9 ; Needed for Fonts.
10 (allow file-read* (regex #"^/System/Library/Fonts($|/)")) ; 10.5.6 10 (allow file-read* (regex #"^/System/Library/Fonts($|/)")) ; 10.5.6
11 ; 10.6 for loading fonts in the renderer. 11 ; 10.6 for loading fonts in the renderer.
12 ; on 10.5 this is needed for the PDF plugin. 12 ; on 10.5 this is needed for the PDF plugin.
13 (allow file-read* (regex #"^/Library/Fonts($|/)")) 13 (allow file-read* (regex #"^/Library/Fonts($|/)"))
14 (allow mach-lookup (global-name "com.apple.FontObjectsServer")) ; 10.5.6 14 (allow mach-lookup (global-name "com.apple.FontObjectsServer")) ; 10.5.6
15 ;10.6_ONLY (allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6 15 ;10.6_OR_ABOVE (allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6
16 16
17 (allow file-read* 17 (allow file-read*
18 (regex #"^/System/Library/ColorSync($|/)") ; 10.5.6 - http://crbug.com/46648 18 (regex #"^/System/Library/ColorSync($|/)") ; 10.5.6 - http://crbug.com/46648
19 (literal "/Library/Preferences/.GlobalPreferences.plist") ; http://crbug.com/6 0917 19 (literal "/Library/Preferences/.GlobalPreferences.plist") ; http://crbug.com/6 0917
20 (literal "@USER_HOMEDIR_AS_LITERAL@/Library/Preferences/.GlobalPreferences.pli st") 20 (literal "@USER_HOMEDIR_AS_LITERAL@/Library/Preferences/.GlobalPreferences.pli st")
21 ) 21 )
22 22
23 ; http://crbug.com/11269 23 ; http://crbug.com/11269
24 ;10.6_ONLY (allow file-read* (subpath "@USER_HOMEDIR_AS_LITERAL@/Library/Fonts") ) ; 10.6 24 ;10.6_OR_ABOVE (allow file-read* (subpath "@USER_HOMEDIR_AS_LITERAL@/Library/Fon ts")) ; 10.6
25 25
26 ; http://crbug.com/60917 26 ; http://crbug.com/60917
27 (allow file-read-metadata 27 (allow file-read-metadata
28 (literal "/") 28 (literal "/")
29 (literal "/var") 29 (literal "/var")
30 ) 30 )
OLDNEW
« content/common/sandbox_mac.mm ('K') | « content/common/sandbox_mac.mm ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698