Bug 1322024 - [Mac] Remove com.apple.windowserver.active access from the content sandbox. r=Alex_Gaynor
authorHaik Aftandilian <haftandilian@mozilla.com>
Mon, 24 Jul 2017 15:22:58 -0700
changeset 642221 da3110f2da8bb70c63f314f3c95e6c35b54897e4
parent 642220 28f22d3e5ce131ca1fada15226163028a39043a6
child 642222 845dd7955f8a3b358a3e3db1c83d2ba964d6ef97
push id72685
push userbmo:emilio+bugs@crisal.io
push dateMon, 07 Aug 2017 22:41:31 +0000
reviewersAlex_Gaynor
bugs1322024
milestone57.0a1
Bug 1322024 - [Mac] Remove com.apple.windowserver.active access from the content sandbox. r=Alex_Gaynor MozReview-Commit-ID: CY99fseWrQX
security/sandbox/mac/SandboxPolicies.h
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -181,17 +181,16 @@ static const char contentSandboxRules[] 
     (ipc-posix-name-regex "^AudioIO"))
 
   (allow signal (target self))
 
   (allow mach-lookup
       (global-name "com.apple.coreservices.launchservicesd")
       (global-name "com.apple.pasteboard.1")
       (global-name "com.apple.window_proxies")
-      (global-name "com.apple.windowserver.active")
       (global-name "com.apple.audio.coreaudiod")
       (global-name "com.apple.audio.audiohald")
       (global-name "com.apple.SystemConfiguration.configd")
       (global-name "com.apple.iconservices")
       (global-name "com.apple.cache_delete"))
 
 ; bug 1376163
   (if (>= macosMinorVersion 13)