Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(551)

Side by Side Diff: content/renderer/renderer.sb

Issue 2919963003: Update sandbox profiles and remove regular expressions. (Closed)
Patch Set: Remove string quoting Created 3 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « content/ppapi_plugin/ppapi.sb ('k') | content/utility/utility.sb » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 ;; 1 ;;
2 ;; Copyright (c) 2011 The Chromium Authors. All rights reserved. 2 ;; Copyright (c) 2011 The Chromium Authors. All rights reserved.
3 ;; Use of this source code is governed by a BSD-style license that can be 3 ;; Use of this source code is governed by a BSD-style license that can be
4 ;; found in the LICENSE file. 4 ;; found in the LICENSE file.
5 ;; 5 ;;
6 6
7 ; *** The contents of content/common/common.sb are implicitly included here. *** 7 ; *** The contents of content/common/common.sb are implicitly included here. ***
8 8
9 ; Needed for Fonts. 9 ; Needed for Fonts.
10 (allow file-read* (regex #"^/System/Library/Fonts($|/)")) 10 (allow file-read* (subpath "/System/Library/Fonts"))
11 (allow file-read* (regex #"^/Library/Fonts($|/)")) 11 (allow file-read* (subpath "/Library/Fonts"))
12 (allow mach-lookup (global-name "com.apple.FontObjectsServer")) 12 (allow mach-lookup (global-name "com.apple.FontObjectsServer"))
13 (allow mach-lookup (global-name "com.apple.FontServer")) 13 (allow mach-lookup (global-name "com.apple.FontServer"))
14 (allow mach-lookup (global-name "com.apple.fonts")) 14 (allow mach-lookup (global-name "com.apple.fonts"))
15 (allow file-read* (extension "com.apple.app-sandbox.read")) ; https://crbug.com/ 662686 15 (allow file-read* (extension "com.apple.app-sandbox.read")) ; https://crbug.com/ 662686
16 16
17 ; Allow read-only connection to launchservicesd. https://crbug.com/533537 17 ; Allow read-only connection to launchservicesd. https://crbug.com/533537
18 (allow mach-lookup (global-name "com.apple.lsd.mapdb")) 18 (allow mach-lookup (global-name "com.apple.lsd.mapdb"))
19 19
20 (allow file-read* 20 (allow file-read*
21 (regex #"^/System/Library/ColorSync($|/)") ; https://crbug.com/46648 21 (subpath "/System/Library/ColorSync") ; https://crbug.com/46648
22 (regex #"^/System/Library/Keyboard Layouts($|/)") ; https://crbug.com/152566 22 (subpath "/System/Library/Keyboard Layouts") ; https://crbug.com/152566
23 (literal "/Library/Preferences/.GlobalPreferences.plist") ; https://crbug.com/ 60917 23 (literal "/Library/Preferences/.GlobalPreferences.plist") ; https://crbug.com/ 60917
24 (literal (user-homedir-path "/Library/Preferences/.GlobalPreferences.plist"))) 24 (literal (user-homedir-path "/Library/Preferences/.GlobalPreferences.plist")))
25 25
26 ; https://crbug.com/11269 26 ; https://crbug.com/11269
27 (allow file-read* (subpath (user-homedir-path "/Library/Fonts"))) 27 (allow file-read* (subpath (user-homedir-path "/Library/Fonts")))
28 28
29 ; https://crbug.com/60917 29 ; https://crbug.com/60917
30 (allow file-read-metadata 30 (allow file-read-metadata
31 (literal "/") 31 (literal "/")
32 (literal "/var")) 32 (literal "/var"))
33 33
34 ; https://crbug.com/288697 34 ; https://crbug.com/288697
35 (allow file-read* 35 (allow file-read*
36 (regex #"^/(private/)?etc/localtime$") 36 (path "/private/etc/localtime")
37 (regex #"^/usr/share/zoneinfo/")) 37 (subpath "/usr/share/zoneinfo"))
38 38
39 (allow file-read-metadata (regex #"^/(private/)?etc$")) 39 (allow file-read-metadata (path "/private/etc"))
40 40
41 ; https://crbug.com/605840 41 ; https://crbug.com/605840
42 ; file-read-metadata /System/Library/LinguisticData/en/US/hyphenation.dat 42 ; file-read-metadata /System/Library/LinguisticData/en/US/hyphenation.dat
43 ; for CFStringIsHyphenationAvailableForLocale and CFStringGetHyphenationLocation BeforeIndex 43 ; for CFStringIsHyphenationAvailableForLocale and CFStringGetHyphenationLocation BeforeIndex
44 (allow file-read* (subpath "/System/Library/LinguisticData")) 44 (allow file-read* (subpath "/System/Library/LinguisticData"))
OLDNEW
« no previous file with comments | « content/ppapi_plugin/ppapi.sb ('k') | content/utility/utility.sb » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698