Index: chrome_mac/Chromium.app/Contents/Versions/14.0.794.0/Chromium Framework.framework/Resources/renderer.sb |
=================================================================== |
--- chrome_mac/Chromium.app/Contents/Versions/14.0.794.0/Chromium Framework.framework/Resources/renderer.sb (revision 0) |
+++ chrome_mac/Chromium.app/Contents/Versions/14.0.794.0/Chromium Framework.framework/Resources/renderer.sb (revision 0) |
@@ -0,0 +1,30 @@ |
+;; |
+;; Copyright (c) 2011 The Chromium Authors. All rights reserved. |
+;; Use of this source code is governed by a BSD-style license that can be |
+;; found in the LICENSE file. |
+;; |
+ |
+; *** The contents of content/common/common.sb are implicitly included here. *** |
+ |
+; Needed for Fonts. |
+(allow file-read* (regex #"^/System/Library/Fonts($|/)")) ; 10.5.6 |
+; 10.6 for loading fonts in the renderer. |
+; on 10.5 this is needed for the PDF plugin. |
+(allow file-read* (regex #"^/Library/Fonts($|/)")) |
+(allow mach-lookup (global-name "com.apple.FontObjectsServer")) ; 10.5.6 |
+;10.6_OR_ABOVE (allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6 |
+ |
+(allow file-read* |
+ (regex #"^/System/Library/ColorSync($|/)") ; 10.5.6 - http://crbug.com/46648 |
+ (literal "/Library/Preferences/.GlobalPreferences.plist") ; http://crbug.com/60917 |
+ (literal "@USER_HOMEDIR_AS_LITERAL@/Library/Preferences/.GlobalPreferences.plist") |
+) |
+ |
+; http://crbug.com/11269 |
+;10.6_OR_ABOVE (allow file-read* (subpath "@USER_HOMEDIR_AS_LITERAL@/Library/Fonts")) ; 10.6 |
+ |
+; http://crbug.com/60917 |
+(allow file-read-metadata |
+ (literal "/") |
+ (literal "/var") |
+) |