OLD | NEW |
1 ;; | 1 ;; |
2 ;; Copyright (c) 2011 The Chromium Authors. All rights reserved. | 2 ;; Copyright (c) 2011 The Chromium Authors. All rights reserved. |
3 ;; Use of this source code is governed by a BSD-style license that can be | 3 ;; Use of this source code is governed by a BSD-style license that can be |
4 ;; found in the LICENSE file. | 4 ;; found in the LICENSE file. |
5 ;; | 5 ;; |
6 | 6 |
7 ; *** The contents of content/common/common.sb are implicitly included here. *** | 7 ; *** The contents of content/common/common.sb are implicitly included here. *** |
8 | 8 |
9 ; Needed for Fonts. | 9 ; Needed for Fonts. |
10 (allow file-read* (regex #"^/System/Library/Fonts($|/)")) | 10 (allow file-read* (regex #"^/System/Library/Fonts($|/)")) |
11 (allow file-read* (regex #"^/Library/Fonts($|/)")) | 11 (allow file-read* (regex #"^/Library/Fonts($|/)")) |
12 (allow mach-lookup (global-name "com.apple.FontObjectsServer")) | 12 (allow mach-lookup (global-name "com.apple.FontObjectsServer")) |
13 (allow mach-lookup (global-name "com.apple.FontServer")) | 13 (allow mach-lookup (global-name "com.apple.FontServer")) |
14 (allow mach-lookup (global-name "com.apple.fonts")) | 14 (allow mach-lookup (global-name "com.apple.fonts")) |
15 | 15 |
| 16 ; Allow read-only connection to launchservicesd. https://crbug.com/533537 |
| 17 (allow mach-lookup (global-name "com.apple.lsd.mapdb")) |
| 18 |
16 (allow file-read* | 19 (allow file-read* |
17 (regex #"^/System/Library/ColorSync($|/)") ; https://crbug.com/46648 | 20 (regex #"^/System/Library/ColorSync($|/)") ; https://crbug.com/46648 |
18 (regex #"^/System/Library/Keyboard Layouts($|/)") ; https://crbug.com/152566 | 21 (regex #"^/System/Library/Keyboard Layouts($|/)") ; https://crbug.com/152566 |
19 (literal "/Library/Preferences/.GlobalPreferences.plist") ; https://crbug.com/
60917 | 22 (literal "/Library/Preferences/.GlobalPreferences.plist") ; https://crbug.com/
60917 |
20 (literal (user-homedir-path "/Library/Preferences/.GlobalPreferences.plist"))) | 23 (literal (user-homedir-path "/Library/Preferences/.GlobalPreferences.plist"))) |
21 | 24 |
22 ; https://crbug.com/11269 | 25 ; https://crbug.com/11269 |
23 (allow file-read* (subpath (user-homedir-path "/Library/Fonts"))) | 26 (allow file-read* (subpath (user-homedir-path "/Library/Fonts"))) |
24 | 27 |
25 ; https://crbug.com/60917 | 28 ; https://crbug.com/60917 |
26 (allow file-read-metadata | 29 (allow file-read-metadata |
27 (literal "/") | 30 (literal "/") |
28 (literal "/var")) | 31 (literal "/var")) |
29 | 32 |
30 ; https://crbug.com/288697 | 33 ; https://crbug.com/288697 |
31 (allow file-read* | 34 (allow file-read* |
32 (regex #"^/(private/)?etc/localtime$") | 35 (regex #"^/(private/)?etc/localtime$") |
33 (regex #"^/usr/share/zoneinfo/")) | 36 (regex #"^/usr/share/zoneinfo/")) |
34 | 37 |
35 (allow file-read-metadata (regex #"^/(private/)?etc$")) | 38 (allow file-read-metadata (regex #"^/(private/)?etc$")) |
36 | 39 |
37 ; https://crbug.com/605840 | 40 ; https://crbug.com/605840 |
38 ; file-read-metadata /System/Library/LinguisticData/en/US/hyphenation.dat | 41 ; file-read-metadata /System/Library/LinguisticData/en/US/hyphenation.dat |
39 ; for CFStringIsHyphenationAvailableForLocale and CFStringGetHyphenationLocation
BeforeIndex | 42 ; for CFStringIsHyphenationAvailableForLocale and CFStringGetHyphenationLocation
BeforeIndex |
40 (allow file-read* (subpath "/System/Library/LinguisticData")) | 43 (allow file-read* (subpath "/System/Library/LinguisticData")) |
OLD | NEW |