Bug 1469657 - Whitelist Extensis UTC fonts on 10.11 and Earlier. r=Alex_Gaynor, a=lizzard
authorHaik Aftandilian <haftandilian@mozilla.com>
Tue, 19 Jun 2018 11:39:41 -0700
changeset 477765 f0c51d4ad04b0f66e85f6ffe1a6d20bd2c6694f2
parent 477764 ae4c7cec37a4405685048480105f5df532ab8369
child 477766 e28ce913332af9fdf5d3efb11f0588e4d5476230
push id9419
push userryanvm@gmail.com
push dateMon, 02 Jul 2018 13:49:45 +0000
treeherdermozilla-beta@e28ce913332a [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersAlex_Gaynor, lizzard
bugs1469657
milestone62.0
Bug 1469657 - Whitelist Extensis UTC fonts on 10.11 and Earlier. r=Alex_Gaynor, a=lizzard Add whitelist rules to allow access to Extensis Universal Type Manager fonts on 10.11 and earlier OS versions. MozReview-Commit-ID: 3cPKlC1xCUW
security/sandbox/mac/SandboxPolicies.h
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -361,16 +361,18 @@ static const char contentSandboxRules[] 
       (regex #"\.[oO][tT][fF]$"          ; otf
              #"\.[tT][tT][fF]$"          ; ttf
              #"\.[tT][tT][cC]$"          ; ttc
              #"\.[oO][tT][cC]$"          ; otc
              #"\.[dD][fF][oO][nN][tT]$") ; dfont
       (home-subpath "/Library/FontCollections")
       (home-subpath "/Library/Application Support/Adobe/CoreSync/plugins/livetype")
       (home-subpath "/Library/Application Support/FontAgent")
+      (home-subpath "/Library/Extensis/UTC") ; bug 1469657
+      (subpath "/Library/Extensis/UTC")      ; bug 1469657
       (regex #"\.fontvault/")
       (home-subpath "/FontExplorer X/Font Library")))
 )SANDBOX_LITERAL";
 
 // These are additional rules that are added to the content process rules for
 // file content processes.
 static const char fileContentProcessAddend[] = R"SANDBOX_LITERAL(
   ; This process has blanket file read privileges
@@ -671,16 +673,18 @@ static const char flashPluginSandboxRule
       (regex #"\.[oO][tT][fF]$"          ; otf
              #"\.[tT][tT][fF]$"          ; ttf
              #"\.[tT][tT][cC]$"          ; ttc
              #"\.[oO][tT][cC]$"          ; otc
              #"\.[dD][fF][oO][nN][tT]$") ; dfont
       (home-subpath "/Library/FontCollections")
       (home-subpath "/Library/Application Support/Adobe/CoreSync/plugins/livetype")
       (home-subpath "/Library/Application Support/FontAgent")
+      (home-subpath "/Library/Extensis/UTC") ; bug 1469657
+      (subpath "/Library/Extensis/UTC")      ; bug 1469657
       (regex #"\.fontvault/")
       (home-subpath "/FontExplorer X/Font Library")))
 
   (if (string=? sandbox-level-1 "TRUE") (begin
     ; Open file dialogs
     (allow mach-lookup
 	; needed for the dialog sidebar
 	(global-name "com.apple.coreservices.sharedfilelistd.xpc")