[email protected] | e8aa85c | 2009-02-17 19:08:44 | [diff] [blame] | 1 | ;; |
2 | ;; Copyright (c) 2009 The Chromium Authors. All rights reserved. | ||||
3 | ;; Use of this source code is governed by a BSD-style license that can be | ||||
4 | ;; found in the LICENSE file. | ||||
5 | ;; | ||||
6 | (version 1) | ||||
7 | (deny default) | ||||
[email protected] | 810d640 | 2009-10-09 16:23:10 | [diff] [blame^] | 8 | ; Support for programmatically enabling verbose debugging. |
9 | ;ENABLE_LOGGING (debug deny) | ||||
[email protected] | e8aa85c | 2009-02-17 19:08:44 | [diff] [blame] | 10 | |
[email protected] | 264e0e307 | 2009-08-27 22:06:09 | [diff] [blame] | 11 | ; Allow sending signals to self - http://crbug.com/20370 |
[email protected] | 005afbd | 2009-08-28 22:34:36 | [diff] [blame] | 12 | (allow signal (target self)) |
[email protected] | 264e0e307 | 2009-08-27 22:06:09 | [diff] [blame] | 13 | |
[email protected] | 3a3e5b3 | 2009-08-21 22:30:47 | [diff] [blame] | 14 | ; Needed for full-page-zoomed controls - http://crbug.com/11325 |
[email protected] | 9c7c492 | 2009-06-04 19:17:04 | [diff] [blame] | 15 | (allow sysctl-read) |
16 | |||||
[email protected] | 3e21831 | 2009-04-16 21:33:09 | [diff] [blame] | 17 | ; Each line is marked with the System version that needs it. |
18 | ; This profile is tested with the following system versions: | ||||
[email protected] | 810d640 | 2009-10-09 16:23:10 | [diff] [blame^] | 19 | ; 10.5.6, 10.6 |
[email protected] | 3e21831 | 2009-04-16 21:33:09 | [diff] [blame] | 20 | |
[email protected] | e8aa85c | 2009-02-17 19:08:44 | [diff] [blame] | 21 | ; Allow following symlinks |
[email protected] | 3e21831 | 2009-04-16 21:33:09 | [diff] [blame] | 22 | (allow file-read-metadata) ; 10.5.6 |
[email protected] | e8aa85c | 2009-02-17 19:08:44 | [diff] [blame] | 23 | |
[email protected] | 3a3e5b3 | 2009-08-21 22:30:47 | [diff] [blame] | 24 | ; Loading System Libraries. |
25 | (allow file-read-data (regex #"^/System/Library/Frameworks")) ; 10.5.6 | ||||
26 | (allow file-read-data (regex #"^/System/Library/PrivateFrameworks")) ; 10.5.6 | ||||
27 | (allow file-read-data (regex #"^/System/Library/CoreServices")) ; 10.5.6 | ||||
28 | |||||
29 | ; Needed for Fonts. | ||||
30 | (allow file-read-data (regex #"^/System/Library/Fonts")) ; 10.5.6 | ||||
[email protected] | 810d640 | 2009-10-09 16:23:10 | [diff] [blame^] | 31 | ;10.6_ONLY (allow file-read-data (regex #"^/Library/Fonts")) ; 10.6 |
[email protected] | 3e21831 | 2009-04-16 21:33:09 | [diff] [blame] | 32 | (allow mach-lookup (global-name "com.apple.FontObjectsServer")) ; 10.5.6 |
[email protected] | 810d640 | 2009-10-09 16:23:10 | [diff] [blame^] | 33 | ;10.6_ONLY (allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6 |
[email protected] | 3a3e5b3 | 2009-08-21 22:30:47 | [diff] [blame] | 34 | |
35 | ; USER_HOMEDIR is substitued at runtime - http://crbug.com/11269 | ||||
[email protected] | 810d640 | 2009-10-09 16:23:10 | [diff] [blame^] | 36 | ;10.6_ONLY (allow file-read-data (subpath "USER_HOMEDIR/Library/Fonts")) ; 10.6 |
[email protected] | 04bd2bb5 | 2009-05-05 20:07:19 | [diff] [blame] | 37 | |
38 | ; Needed for IPC on 10.6 | ||||
[email protected] | 810d640 | 2009-10-09 16:23:10 | [diff] [blame^] | 39 | ;10.6_ONLY (allow ipc-posix-shm) |