OLD | NEW |
1 ;; | 1 ;; |
2 ;; Copyright (c) 2011 The Chromium Authors. All rights reserved. | 2 ;; Copyright (c) 2011 The Chromium Authors. All rights reserved. |
3 ;; Use of this source code is governed by a BSD-style license that can be | 3 ;; Use of this source code is governed by a BSD-style license that can be |
4 ;; found in the LICENSE file. | 4 ;; found in the LICENSE file. |
5 ;; | 5 ;; |
6 | 6 |
7 ; *** The contents of content/common/common.sb are implicitly included here. *** | 7 ; *** The contents of content/common/common.sb are implicitly included here. *** |
8 | 8 |
9 ; Allow communication between the GPU process and the UI server. | 9 ; Allow communication between the GPU process and the UI server. |
10 (allow mach-lookup (global-name "com.apple.tsm.uiserver")) | 10 (allow mach-lookup (global-name "com.apple.tsm.uiserver")) |
11 | 11 |
12 (allow file-read-metadata (literal "/")) | 12 (allow file-read-metadata (literal "/")) |
13 | 13 |
14 ; Needed for WebGL on OS X 10.7 - crbug.com/75343 | 14 ; Needed for WebGL - crbug.com/75343 |
15 (if (param-true? lion-or-later) | 15 (allow iokit-open |
16 (allow iokit-open | 16 (iokit-connection "IOAccelerator") |
17 (iokit-connection "IOAccelerator") | 17 (iokit-user-client-class "IOAccelerationUserClient") |
18 (iokit-user-client-class "IOAccelerationUserClient") | 18 (iokit-user-client-class "IOFramebufferSharedUserClient") |
19 (iokit-user-client-class "IOFramebufferSharedUserClient") | 19 (iokit-user-client-class "AppleGraphicsControlClient") |
20 (iokit-user-client-class "AppleGraphicsControlClient") | 20 (iokit-user-client-class "AGPMClient") |
21 (iokit-user-client-class "AGPMClient") | 21 (iokit-user-client-class "IOHIDParamUserClient") |
22 (iokit-user-client-class "IOHIDParamUserClient") | 22 (iokit-user-client-class "RootDomainUserClient") |
23 (iokit-user-client-class "RootDomainUserClient") | 23 (iokit-user-client-class "IOSurfaceRootUserClient") |
24 (iokit-user-client-class "IOSurfaceRootUserClient") | 24 (iokit-user-client-class "IOSurfaceSendRight")) |
25 (iokit-user-client-class "IOSurfaceSendRight"))) | |
26 | 25 |
27 ; https://crbug.com/515280 | 26 ; https://crbug.com/515280 |
28 (if (param-true? elcap-or-later) | 27 (if (param-true? elcap-or-later) |
29 (allow file-read* (regex #"^/System/Library/Extensions($|/)"))) | 28 (allow file-read* (regex #"^/System/Library/Extensions($|/)"))) |
OLD | NEW |