Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(326)

Unified Diff: content/renderer/renderer.sb

Issue 2510923003: Widen sandbox rules to allow access to downloaded Sierra fonts (Closed)
Patch Set: Created 4 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | no next file » | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: content/renderer/renderer.sb
diff --git a/content/renderer/renderer.sb b/content/renderer/renderer.sb
index 7afdf86b297208b53eac3eff330e808a53edeea4..5d35f2d019d33da8a288d96766b35615e0e12178 100644
--- a/content/renderer/renderer.sb
+++ b/content/renderer/renderer.sb
@@ -9,6 +9,7 @@
; Needed for Fonts.
(allow file-read* (regex #"^/System/Library/Fonts($|/)"))
(allow file-read* (regex #"^/Library/Fonts($|/)"))
+(allow file-read* (regex #"^/System/Library/Assets/com_apple_MobileAsset_Font3($|/)"))
Robert Sesek 2016/11/17 17:51:29 Can you add a comment with the bug URL?
(allow mach-lookup (global-name "com.apple.FontObjectsServer"))
(allow mach-lookup (global-name "com.apple.FontServer"))
(allow mach-lookup (global-name "com.apple.fonts"))
« no previous file with comments | « no previous file | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698