Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(485)

Unified Diff: content/renderer/renderer.sb

Issue 2919963003: Update sandbox profiles and remove regular expressions. (Closed)
Patch Set: Remove string quoting Created 3 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « content/ppapi_plugin/ppapi.sb ('k') | content/utility/utility.sb » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: content/renderer/renderer.sb
diff --git a/content/renderer/renderer.sb b/content/renderer/renderer.sb
index fb81878ebf0026e0c23fc52e13e26a62656dc280..fd54bf7882411ad2d02a3734b13152a58dbc7606 100644
--- a/content/renderer/renderer.sb
+++ b/content/renderer/renderer.sb
@@ -7,8 +7,8 @@
; *** The contents of content/common/common.sb are implicitly included here. ***
; Needed for Fonts.
-(allow file-read* (regex #"^/System/Library/Fonts($|/)"))
-(allow file-read* (regex #"^/Library/Fonts($|/)"))
+(allow file-read* (subpath "/System/Library/Fonts"))
+(allow file-read* (subpath "/Library/Fonts"))
(allow mach-lookup (global-name "com.apple.FontObjectsServer"))
(allow mach-lookup (global-name "com.apple.FontServer"))
(allow mach-lookup (global-name "com.apple.fonts"))
@@ -18,8 +18,8 @@
(allow mach-lookup (global-name "com.apple.lsd.mapdb"))
(allow file-read*
- (regex #"^/System/Library/ColorSync($|/)") ; https://crbug.com/46648
- (regex #"^/System/Library/Keyboard Layouts($|/)") ; https://crbug.com/152566
+ (subpath "/System/Library/ColorSync") ; https://crbug.com/46648
+ (subpath "/System/Library/Keyboard Layouts") ; https://crbug.com/152566
(literal "/Library/Preferences/.GlobalPreferences.plist") ; https://crbug.com/60917
(literal (user-homedir-path "/Library/Preferences/.GlobalPreferences.plist")))
@@ -33,10 +33,10 @@
; https://crbug.com/288697
(allow file-read*
- (regex #"^/(private/)?etc/localtime$")
- (regex #"^/usr/share/zoneinfo/"))
+ (path "/private/etc/localtime")
+ (subpath "/usr/share/zoneinfo"))
-(allow file-read-metadata (regex #"^/(private/)?etc$"))
+(allow file-read-metadata (path "/private/etc"))
; https://crbug.com/605840
; file-read-metadata /System/Library/LinguisticData/en/US/hyphenation.dat
« no previous file with comments | « content/ppapi_plugin/ppapi.sb ('k') | content/utility/utility.sb » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698