Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(182)

Side by Side Diff: content/renderer/renderer.sb

Issue 2531163007: Permit renderer access to Mach global-name com.apple.lsd.mapdb. (Closed)
Patch Set: Created 4 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « no previous file | no next file » | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 ;; 1 ;;
2 ;; Copyright (c) 2011 The Chromium Authors. All rights reserved. 2 ;; Copyright (c) 2011 The Chromium Authors. All rights reserved.
3 ;; Use of this source code is governed by a BSD-style license that can be 3 ;; Use of this source code is governed by a BSD-style license that can be
4 ;; found in the LICENSE file. 4 ;; found in the LICENSE file.
5 ;; 5 ;;
6 6
7 ; *** The contents of content/common/common.sb are implicitly included here. *** 7 ; *** The contents of content/common/common.sb are implicitly included here. ***
8 8
9 ; Needed for Fonts. 9 ; Needed for Fonts.
10 (allow file-read* (regex #"^/System/Library/Fonts($|/)")) 10 (allow file-read* (regex #"^/System/Library/Fonts($|/)"))
11 (allow file-read* (regex #"^/Library/Fonts($|/)")) 11 (allow file-read* (regex #"^/Library/Fonts($|/)"))
12 (allow mach-lookup (global-name "com.apple.FontObjectsServer")) 12 (allow mach-lookup (global-name "com.apple.FontObjectsServer"))
13 (allow mach-lookup (global-name "com.apple.FontServer")) 13 (allow mach-lookup (global-name "com.apple.FontServer"))
14 (allow mach-lookup (global-name "com.apple.fonts")) 14 (allow mach-lookup (global-name "com.apple.fonts"))
15 15
16 ; Allow read-only connection to launchservicesd. https://crbug.com/533537
17 (allow mach-lookup (global-name "com.apple.lsd.mapdb"))
18
16 (allow file-read* 19 (allow file-read*
17 (regex #"^/System/Library/ColorSync($|/)") ; https://crbug.com/46648 20 (regex #"^/System/Library/ColorSync($|/)") ; https://crbug.com/46648
18 (regex #"^/System/Library/Keyboard Layouts($|/)") ; https://crbug.com/152566 21 (regex #"^/System/Library/Keyboard Layouts($|/)") ; https://crbug.com/152566
19 (literal "/Library/Preferences/.GlobalPreferences.plist") ; https://crbug.com/ 60917 22 (literal "/Library/Preferences/.GlobalPreferences.plist") ; https://crbug.com/ 60917
20 (literal (user-homedir-path "/Library/Preferences/.GlobalPreferences.plist"))) 23 (literal (user-homedir-path "/Library/Preferences/.GlobalPreferences.plist")))
21 24
22 ; https://crbug.com/11269 25 ; https://crbug.com/11269
23 (allow file-read* (subpath (user-homedir-path "/Library/Fonts"))) 26 (allow file-read* (subpath (user-homedir-path "/Library/Fonts")))
24 27
25 ; https://crbug.com/60917 28 ; https://crbug.com/60917
26 (allow file-read-metadata 29 (allow file-read-metadata
27 (literal "/") 30 (literal "/")
28 (literal "/var")) 31 (literal "/var"))
29 32
30 ; https://crbug.com/288697 33 ; https://crbug.com/288697
31 (allow file-read* 34 (allow file-read*
32 (regex #"^/(private/)?etc/localtime$") 35 (regex #"^/(private/)?etc/localtime$")
33 (regex #"^/usr/share/zoneinfo/")) 36 (regex #"^/usr/share/zoneinfo/"))
34 37
35 (allow file-read-metadata (regex #"^/(private/)?etc$")) 38 (allow file-read-metadata (regex #"^/(private/)?etc$"))
36 39
37 ; https://crbug.com/605840 40 ; https://crbug.com/605840
38 ; file-read-metadata /System/Library/LinguisticData/en/US/hyphenation.dat 41 ; file-read-metadata /System/Library/LinguisticData/en/US/hyphenation.dat
39 ; for CFStringIsHyphenationAvailableForLocale and CFStringGetHyphenationLocation BeforeIndex 42 ; for CFStringIsHyphenationAvailableForLocale and CFStringGetHyphenationLocation BeforeIndex
40 (allow file-read* (subpath "/System/Library/LinguisticData")) 43 (allow file-read* (subpath "/System/Library/LinguisticData"))
OLDNEW
« no previous file with comments | « no previous file | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698