| [email protected] | 802a13a0 | 2010-12-02 01:48:37 | [diff] [blame] | 1 | ;; |
| [email protected] | 7b7fc63 | 2011-05-24 09:06:40 | [diff] [blame] | 2 | ;; Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| [email protected] | 802a13a0 | 2010-12-02 01:48:37 | [diff] [blame] | 3 | ;; Use of this source code is governed by a BSD-style license that can be |
| 4 | ;; found in the LICENSE file. |
| 5 | ;; |
| 6 | |
| [email protected] | 7b7fc63 | 2011-05-24 09:06:40 | [diff] [blame] | 7 | ; *** The contents of content/common/common.sb are implicitly included here. *** |
| [email protected] | 802a13a0 | 2010-12-02 01:48:37 | [diff] [blame] | 8 | |
| [email protected] | 3baf47a | 2010-12-05 19:40:53 | [diff] [blame] | 9 | ; Allow communication between the GPU process and the UI server. |
| 10 | (allow mach-lookup (global-name "com.apple.tsm.uiserver")) |
| 11 | |
| 12 | (allow file-read-metadata (literal "/")) |
| [email protected] | 7b7fc63 | 2011-05-24 09:06:40 | [diff] [blame] | 13 | |
| 14 | ; Needed for WebGL on OS X 10.7 - crbug.com/75343 |
| kerrnel | e46995f | 2015-07-16 15:41:30 | [diff] [blame] | 15 | (if (param-true? lion-or-later) |
| 16 | (allow iokit-open |
| 17 | (iokit-connection "IOAccelerator") |
| 18 | (iokit-user-client-class "IOAccelerationUserClient") |
| 19 | (iokit-user-client-class "IOFramebufferSharedUserClient") |
| 20 | (iokit-user-client-class "AppleGraphicsControlClient") |
| 21 | (iokit-user-client-class "AGPMClient") |
| 22 | (iokit-user-client-class "IOHIDParamUserClient") |
| 23 | (iokit-user-client-class "RootDomainUserClient") |
| 24 | (iokit-user-client-class "IOSurfaceRootUserClient") |
| 25 | (iokit-user-client-class "IOSurfaceSendRight"))) |
| kerrnel | ddec4f0 | 2015-08-14 16:48:05 | [diff] [blame] | 26 | |
| 27 | ; https://crbug.com/515280 |
| 28 | (if (param-true? elcap-or-later) |
| 29 | (allow file-read* (regex #"^/System/Library/Extensions($|/)"))) |
