| OLD | NEW |
| 1 ;; | 1 ;; |
| 2 ;; Copyright (c) 2011 The Chromium Authors. All rights reserved. | 2 ;; Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 3 ;; Use of this source code is governed by a BSD-style license that can be | 3 ;; Use of this source code is governed by a BSD-style license that can be |
| 4 ;; found in the LICENSE file. | 4 ;; found in the LICENSE file. |
| 5 ;; | 5 ;; |
| 6 | 6 |
| 7 ; *** The contents of content/common/common.sb are implicitly included here. *** | 7 ; *** The contents of content/common/common.sb are implicitly included here. *** |
| 8 | 8 |
| 9 ; Needed for Fonts. | 9 ; Needed for Fonts. |
| 10 (allow file-read* (regex #"^/System/Library/Fonts($|/)")) | 10 (allow file-read* (regex #"^/System/Library/Fonts($|/)")) |
| 11 (allow file-read* (regex #"^/Library/Fonts($|/)")) | 11 (allow file-read* (regex #"^/Library/Fonts($|/)")) |
| 12 (allow mach-lookup (global-name "com.apple.FontObjectsServer")) | 12 (allow mach-lookup (global-name "com.apple.FontObjectsServer")) |
| 13 (allow mach-lookup (global-name "com.apple.FontServer")) | 13 (allow mach-lookup (global-name "com.apple.FontServer")) |
| 14 (allow mach-lookup (global-name "com.apple.fonts")) | 14 (allow mach-lookup (global-name "com.apple.fonts")) |
| 15 | 15 |
| 16 ; Allow read-only connection to launchservicesd. https://crbug.com/533537 |
| 17 (allow mach-lookup (global-name "com.apple.lsd.mapdb")) |
| 18 |
| 16 (allow file-read* | 19 (allow file-read* |
| 17 (regex #"^/System/Library/ColorSync($|/)") ; https://crbug.com/46648 | 20 (regex #"^/System/Library/ColorSync($|/)") ; https://crbug.com/46648 |
| 18 (regex #"^/System/Library/Keyboard Layouts($|/)") ; https://crbug.com/152566 | 21 (regex #"^/System/Library/Keyboard Layouts($|/)") ; https://crbug.com/152566 |
| 19 (literal "/Library/Preferences/.GlobalPreferences.plist") ; https://crbug.com/
60917 | 22 (literal "/Library/Preferences/.GlobalPreferences.plist") ; https://crbug.com/
60917 |
| 20 (literal (user-homedir-path "/Library/Preferences/.GlobalPreferences.plist"))) | 23 (literal (user-homedir-path "/Library/Preferences/.GlobalPreferences.plist"))) |
| 21 | 24 |
| 22 ; https://crbug.com/11269 | 25 ; https://crbug.com/11269 |
| 23 (allow file-read* (subpath (user-homedir-path "/Library/Fonts"))) | 26 (allow file-read* (subpath (user-homedir-path "/Library/Fonts"))) |
| 24 | 27 |
| 25 ; https://crbug.com/60917 | 28 ; https://crbug.com/60917 |
| 26 (allow file-read-metadata | 29 (allow file-read-metadata |
| 27 (literal "/") | 30 (literal "/") |
| 28 (literal "/var")) | 31 (literal "/var")) |
| 29 | 32 |
| 30 ; https://crbug.com/288697 | 33 ; https://crbug.com/288697 |
| 31 (allow file-read* | 34 (allow file-read* |
| 32 (regex #"^/(private/)?etc/localtime$") | 35 (regex #"^/(private/)?etc/localtime$") |
| 33 (regex #"^/usr/share/zoneinfo/")) | 36 (regex #"^/usr/share/zoneinfo/")) |
| 34 | 37 |
| 35 (allow file-read-metadata (regex #"^/(private/)?etc$")) | 38 (allow file-read-metadata (regex #"^/(private/)?etc$")) |
| 36 | 39 |
| 37 ; https://crbug.com/605840 | 40 ; https://crbug.com/605840 |
| 38 ; file-read-metadata /System/Library/LinguisticData/en/US/hyphenation.dat | 41 ; file-read-metadata /System/Library/LinguisticData/en/US/hyphenation.dat |
| 39 ; for CFStringIsHyphenationAvailableForLocale and CFStringGetHyphenationLocation
BeforeIndex | 42 ; for CFStringIsHyphenationAvailableForLocale and CFStringGetHyphenationLocation
BeforeIndex |
| 40 (allow file-read* (subpath "/System/Library/LinguisticData")) | 43 (allow file-read* (subpath "/System/Library/LinguisticData")) |
| OLD | NEW |