gecko-dev/security/sandbox/mac
André Reinald 66ca086aa3 Bug 1083344 - Tighten rules for Mac OS content process sandbox on 10.9 and 10.10. r=smichaud
Allow read to whole filesystem until chrome:// and file:// URLs are brokered through another process.
Except $HOME/Library in which we allow only access to profile add-ons subdir.
Add level 2, which allows read only from $HOME and /tmp (while still restricting $HOME/Library.
Change default back to 1.
2015-03-12 17:42:50 +01:00
..
Sandbox.h Bug 1083344 - Tighten rules for Mac OS content process sandbox - "core part". r=smichaud 2015-02-18 14:10:27 +01:00
Sandbox.mm Bug 1083344 - Tighten rules for Mac OS content process sandbox on 10.9 and 10.10. r=smichaud 2015-03-12 17:42:50 +01:00
moz.build