Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(348)

Unified Diff: content/renderer/renderer.sb

Issue 2510923003: Widen sandbox rules to allow access to downloaded Sierra fonts (Closed)
Patch Set: Modify Mac sandbox configuration to permit downloaded fonts Created 4 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | no next file » | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: content/renderer/renderer.sb
diff --git a/content/renderer/renderer.sb b/content/renderer/renderer.sb
index da6a7c0bb2fca7036a8d7f92145812aa4fdff91e..fb81878ebf0026e0c23fc52e13e26a62656dc280 100644
--- a/content/renderer/renderer.sb
+++ b/content/renderer/renderer.sb
@@ -12,6 +12,7 @@
(allow mach-lookup (global-name "com.apple.FontObjectsServer"))
(allow mach-lookup (global-name "com.apple.FontServer"))
(allow mach-lookup (global-name "com.apple.fonts"))
+(allow file-read* (extension "com.apple.app-sandbox.read")) ; https://crbug.com/662686
; Allow read-only connection to launchservicesd. https://crbug.com/533537
(allow mach-lookup (global-name "com.apple.lsd.mapdb"))
« no previous file with comments | « no previous file | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698