Bug 1578907 - MacOS 10.15 Beta - Flash File Picker broken r?spohl a=lizzard
authorHaik Aftandilian <haftandilian@mozilla.com>
Fri, 04 Oct 2019 18:38:07 +0300
changeset 555571 ecedb785928494238ece6311e003e96e9eb763fb
parent 555570 fbf79b038eb751c4f528087735e4171701334ec8
child 555572 0d52451711522294346a175a1fac66859ad9f889
push id2165
push userffxbld-merge
push dateMon, 14 Oct 2019 16:30:58 +0000
treeherdermozilla-release@0eae18af659f [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersspohl, lizzard
bugs1578907
milestone70.0
Bug 1578907 - MacOS 10.15 Beta - Flash File Picker broken r?spohl a=lizzard Allow access to extra services needed to open file pickers from the Flash process on 10.15. Differential Revision: https://phabricator.services.mozilla.com//D48145
security/sandbox/mac/SandboxPolicyFlash.h
--- a/security/sandbox/mac/SandboxPolicyFlash.h
+++ b/security/sandbox/mac/SandboxPolicyFlash.h
@@ -268,16 +268,21 @@ static const char SandboxPolicyFlash[] =
       (global-name "com.apple.tccd.system")
       (global-name "com.apple.cmio.AppleCameraAssistant")
       (global-name "com.apple.cmio.IIDCVideoAssistant")
       (global-name "com.apple.cmio.AVCAssistant")
       (global-name "com.apple.cmio.VDCAssistant"))
   ; bug 1475707
   (if (= macosMinorVersion 9)
      (allow mach-lookup (global-name "com.apple.xpcd")))
+  (if (>= macosMinorVersion 15)
+     (allow mach-lookup
+      (global-name "com.apple.ViewBridgeAuxiliary")
+      (global-name "com.apple.appkit.xpc.openAndSavePanelService")
+      (global-name "com.apple.MTLCompilerService")))
 
   ; Fonts
   (allow file-read*
     (subpath "/Library/Fonts")
     (subpath "/Library/Application Support/Apple/Fonts")
     (home-library-subpath "/Fonts")
     ; Allow read access to paths allowed via sandbox extensions.
     ; This is needed for fonts in non-standard locations normally