OLD | NEW |
---|---|
1 ;; | 1 ;; |
2 ;; Copyright (c) 2012 The Chromium Authors. All rights reserved. | 2 ;; Copyright (c) 2012 The Chromium Authors. All rights reserved. |
3 ;; Use of this source code is governed by a BSD-style license that can be | 3 ;; Use of this source code is governed by a BSD-style license that can be |
4 ;; found in the LICENSE file. | 4 ;; found in the LICENSE file. |
5 ;; | 5 ;; |
6 ; This configuration file isn't used on it's own, but instead implicitly | 6 ; This configuration file isn't used on it's own, but instead implicitly |
7 ; included at the start of all other sandbox configuration files in Chrome. | 7 ; included at the start of all other sandbox configuration files in Chrome. |
8 (version 1) | 8 (version 1) |
9 | 9 |
10 ; DISABLE_SANDBOX_DENIAL_LOGGING expands to syntax that turns off log message | 10 ; DISABLE_SANDBOX_DENIAL_LOGGING expands to syntax that turns off log message |
(...skipping 17 matching lines...) Expand all Loading... | |
28 | 28 |
29 ; Loading System Libraries. | 29 ; Loading System Libraries. |
30 (allow file-read* | 30 (allow file-read* |
31 (regex #"^/System/Library/Frameworks($|/)") | 31 (regex #"^/System/Library/Frameworks($|/)") |
32 (regex #"^/System/Library/PrivateFrameworks($|/)") | 32 (regex #"^/System/Library/PrivateFrameworks($|/)") |
33 (regex #"^/System/Library/CoreServices($|/)")) ; 10.5.6 | 33 (regex #"^/System/Library/CoreServices($|/)")) ; 10.5.6 |
34 | 34 |
35 ; Needed for IPC on 10.6 | 35 ; Needed for IPC on 10.6 |
36 (allow ipc-posix-shm) | 36 (allow ipc-posix-shm) |
37 | 37 |
38 ; _simple.c logs to syslog via unix-domain socket in 10.6. 10.7 uses | |
39 ; a mach port. | |
40 (allow network-outbound | |
41 (remote unix-socket (path-literal "/private/var/run/syslog"))) ; 10.6 | |
jeremy
2012/09/19 04:19:39
Is there a problem not adding this and letting the
| |
42 | |
38 ; Component build workaround for a dyld bug, used on OS X <= 10.6. | 43 ; Component build workaround for a dyld bug, used on OS X <= 10.6. |
39 ; Enables reading file metadata for the Chrome bundle and its parent paths. | 44 ; Enables reading file metadata for the Chrome bundle and its parent paths. |
40 ; http://crbug.com/127465 | 45 ; http://crbug.com/127465 |
41 @COMPONENT_BUILD_WORKAROUND@ | 46 @COMPONENT_BUILD_WORKAROUND@ |
OLD | NEW |