Bug 1322370 - Disable camera access in the Mac content sandbox; r=jimm draft
authorHaik Aftandilian <haftandilian@mozilla.com>
Tue, 06 Dec 2016 12:34:15 -1000
changeset 453041 cb83c181b11229587f6381ebf2f348d1ab4a6d9b
parent 452625 ac7a663718927fcf305f68be0f8ee57918ed6a83
child 540358 32f9498c570a1883ec08e11e5417789986ddb8f1
push id39548
push userhaftandilian@mozilla.com
push dateThu, 22 Dec 2016 18:26:39 +0000
reviewersjimm
bugs1322370
milestone53.0a1
Bug 1322370 - Disable camera access in the Mac content sandbox; r=jimm MozReview-Commit-ID: CSEXN1B0Al8
security/sandbox/mac/Sandbox.mm
--- a/security/sandbox/mac/Sandbox.mm
+++ b/security/sandbox/mac/Sandbox.mm
@@ -320,20 +320,19 @@ static const char contentSandboxRules[] 
   "\n"
   "      (subpath appdir-path)\n"
   "\n"
   "      (literal appPath)\n"
   "      (literal appBinaryPath))\n"
   "\n"
   "  (allow-shared-list \"org.mozilla.plugincontainer\")\n"
   "\n"
-  "; the following 2 rules should be removed when microphone and camera access\n"
-  "; are brokered through the content process\n"
+  "; the following rule should be removed when microphone access\n"
+  "; is brokered through the content process\n"
   "  (allow device-microphone)\n"
-  "  (allow device-camera)\n"
   "\n"
   "  (allow file* (var-folders2-regex \"/com\\.apple\\.IntlDataCache\\.le$\"))\n"
   "  (allow file-read*\n"
   "      (var-folders2-regex \"/com\\.apple\\.IconServices/\")\n"
   "      (var-folders2-regex \"/[^/]+\\.mozrunner/extensions/[^/]+/chrome/[^/]+/content/[^/]+\\.j(s|ar)$\"))\n"
   "\n"
   "  (allow file-write* (var-folders2-regex \"/org\\.chromium\\.[a-zA-Z0-9]*$\"))\n"
   "\n"