Refactor OS X sandbox processing and audit sandbox files

content/ppapi_plugin/ppapi.sb

Index: content/ppapi_plugin/ppapi.sb
diff --git a/content/ppapi_plugin/ppapi.sb b/content/ppapi_plugin/ppapi.sb
index 9ef9d31e176221648e2f7dcf514014535b3376fd..ccdb2e5f84c3f80395fb8a76c5769500f68e1d4e 100644
--- a/content/ppapi_plugin/ppapi.sb
+++ b/content/ppapi_plugin/ppapi.sb
@@ -9,12 +9,10 @@
 ; *** The contents of content/common/common.sb are implicitly included here. ***
 
 ; Needed for Fonts.
-(allow file-read* (regex #"^/System/Library/Fonts($|/)"))  ; 10.5.6
-; 10.6 for loading fonts in the renderer.
-; on 10.5 this is needed for the PDF plugin.
+(allow file-read* (regex #"^/System/Library/Fonts($|/)"))
 (allow file-read* (regex #"^/Library/Fonts($|/)"))
-(allow mach-lookup (global-name "com.apple.FontObjectsServer"))  ; 10.5.6
-(allow mach-lookup (global-name "com.apple.FontServer"))  ; 10.6
+(allow mach-lookup (global-name "com.apple.FontObjectsServer"))
+(allow mach-lookup (global-name "com.apple.FontServer"))
 
 ; http://crbug.com/11269
-(allow file-read* (subpath "@USER_HOMEDIR_AS_LITERAL@/Library/Fonts"))  ; 10.6
+(allow file-read* (subpath (string-append (param homedir-as-literal) "/Library/Fonts")))

[Robert Sesek, 2015/06/22 20:40:23]

Make a function user-homedir-path, since you do this in renderer.sb too?

[Greg K, 2015/06/23 19:05:15]

Done.