Commit bad73d4d authored by andersca@apple.com's avatar andersca@apple.com

2011-04-05 Anders Carlsson <andersca@apple.com>

        Reviewed by Adam Roben.

        Add two more entries to the sandbox profile
        https://bugs.webkit.org/show_bug.cgi?id=57875

        Allow read-access to /Library/Dictionaries since WebCore::nextBreakablePosition
        ends up calling into ICU which accesses the dictionary.

        Allow Mach access to com.apple.networkd since it's used by CFNetwork.

        * WebProcess/com.apple.WebProcess.sb:


git-svn-id: svn://svn.chromium.org/blink/trunk@82973 bbb929c8-8fbe-4397-9dbb-9b2b20218538
parent 6fa7a75c
2011-04-05 Anders Carlsson <andersca@apple.com>
Reviewed by Adam Roben.
Add two more entries to the sandbox profile
https://bugs.webkit.org/show_bug.cgi?id=57875
Allow read-access to /Library/Dictionaries since WebCore::nextBreakablePosition
ends up calling into ICU which accesses the dictionary.
Allow Mach access to com.apple.networkd since it's used by CFNetwork.
* WebProcess/com.apple.WebProcess.sb:
2011-04-05 Anders Carlsson <andersca@apple.com> 2011-04-05 Anders Carlsson <andersca@apple.com>
Reviewed by Oliver Hunt. Reviewed by Oliver Hunt.
......
...@@ -11,6 +11,7 @@ ...@@ -11,6 +11,7 @@
;; Read-only preferences and data ;; Read-only preferences and data
(allow file-read* (allow file-read*
;; Basic system paths ;; Basic system paths
(subpath "/Library/Dictionaries")
(subpath "/Library/Fonts") (subpath "/Library/Fonts")
(subpath "/Library/Frameworks") (subpath "/Library/Frameworks")
(subpath "/Library/Keychains") (subpath "/Library/Keychains")
...@@ -117,6 +118,7 @@ ...@@ -117,6 +118,7 @@
(global-name "com.apple.audio.coreaudiod") (global-name "com.apple.audio.coreaudiod")
(global-name "com.apple.cookied") (global-name "com.apple.cookied")
(global-name "com.apple.cvmsServ") (global-name "com.apple.cvmsServ")
(global-name "com.apple.networkd")
(global-name "com.apple.dock.server") (global-name "com.apple.dock.server")
(global-name "com.apple.ocspd") (global-name "com.apple.ocspd")
(global-name "com.apple.pasteboard.1") (global-name "com.apple.pasteboard.1")
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment