Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(36)

Unified Diff: content/renderer/renderer.sb

Issue 2531163007: Permit renderer access to Mach global-name com.apple.lsd.mapdb. (Closed)
Patch Set: Created 4 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | no next file » | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: content/renderer/renderer.sb
diff --git a/content/renderer/renderer.sb b/content/renderer/renderer.sb
index 7afdf86b297208b53eac3eff330e808a53edeea4..da6a7c0bb2fca7036a8d7f92145812aa4fdff91e 100644
--- a/content/renderer/renderer.sb
+++ b/content/renderer/renderer.sb
@@ -13,6 +13,9 @@
(allow mach-lookup (global-name "com.apple.FontServer"))
(allow mach-lookup (global-name "com.apple.fonts"))
+; Allow read-only connection to launchservicesd. https://crbug.com/533537
+(allow mach-lookup (global-name "com.apple.lsd.mapdb"))
+
(allow file-read*
(regex #"^/System/Library/ColorSync($|/)") ; https://crbug.com/46648
(regex #"^/System/Library/Keyboard Layouts($|/)") ; https://crbug.com/152566
« no previous file with comments | « no previous file | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698