Bug 1322024 - [Mac] Remove com.apple.windowserver.active access from the content sandbox. r?Alex_Gaynor draft
authorHaik Aftandilian <haftandilian@mozilla.com>
Mon, 24 Jul 2017 15:22:58 -0700
changeset 642163 ad3af0c21c8d98ae0088819bec28e7f707711e03
parent 642162 ad35cc1a574e7b307a6fe856d957f82b03d21bab
child 724920 b830b76ba88769d88dc399d94546a18bf4b4d0b2
push id72665
push userhaftandilian@mozilla.com
push dateMon, 07 Aug 2017 19:43:17 +0000
reviewersAlex_Gaynor
bugs1322024
milestone57.0a1
Bug 1322024 - [Mac] Remove com.apple.windowserver.active access from the content sandbox. r?Alex_Gaynor MozReview-Commit-ID: CY99fseWrQX
security/sandbox/mac/SandboxPolicies.h
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -181,17 +181,16 @@ static const char contentSandboxRules[] 
       (ipc-posix-name-regex "^AudioIO"))
 
   (allow signal (target self))
 
   (allow mach-lookup
       (global-name "com.apple.coreservices.launchservicesd")
       (global-name "com.apple.pasteboard.1")
       (global-name "com.apple.window_proxies")
-      (global-name "com.apple.windowserver.active")
       (global-name "com.apple.audio.coreaudiod")
       (global-name "com.apple.audio.audiohald")
       (global-name "com.apple.SystemConfiguration.configd")
       (global-name "com.apple.iconservices")
       (global-name "com.apple.cache_delete")
       (global-name "com.apple.pluginkit.pkd"))
 
 ; bug 1376163