зеркало из https://github.com/mozilla/gecko-dev.git
Bug 1401756 - [Mac] Remove unneeded mach-lookups from plugin sandbox rules. r=Alex_Gaynor
MozReview-Commit-ID: JsgBzNJC4zF --HG-- extra : rebase_source : deffeff5e6d39318c55bf3d487071139abaf3c92
This commit is contained in:
Родитель
06435b3208
Коммит
f39cc5cc25
|
@ -23,12 +23,6 @@ static const char pluginSandboxRules[] = R"(
|
|||
(allow signal (target self))
|
||||
(allow sysctl-read)
|
||||
(allow iokit-open (iokit-user-client-class "IOHIDParamUserClient"))
|
||||
(allow mach-lookup
|
||||
(global-name "com.apple.cfprefsd.agent")
|
||||
(global-name "com.apple.cfprefsd.daemon")
|
||||
(global-name "com.apple.system.opendirectoryd.libinfo")
|
||||
(global-name "com.apple.system.logger")
|
||||
(global-name "com.apple.ls.boxd"))
|
||||
(allow file-read*
|
||||
(literal "/etc")
|
||||
(literal "/dev/random")
|
||||
|
|
Загрузка…
Ссылка в новой задаче