Bug 1324610 - Some printing permissions still needed by content processes; r?gcp draft
authorHaik Aftandilian <haftandilian@mozilla.com>
Tue, 03 Jan 2017 14:33:14 -0800
changeset 456010 f49894a8894d8df3bf19cbf9792d072c852e8c73
parent 456009 509cb24089fc87f1be04f9d2ab476e9238b70a02
child 541094 bf4773fe85fb195c02d01405c8db0458003dc724
push id40350
push userhaftandilian@mozilla.com
push dateWed, 04 Jan 2017 17:47:37 +0000
reviewersgcp
bugs1324610
milestone53.0a1
Bug 1324610 - Some printing permissions still needed by content processes; r?gcp MozReview-Commit-ID: B7nPgf5Xc9x
security/sandbox/mac/Sandbox.mm
--- a/security/sandbox/mac/Sandbox.mm
+++ b/security/sandbox/mac/Sandbox.mm
@@ -391,16 +391,19 @@ static const char contentSandboxRules[] 
   "  (allow file-read*\n"
   "      (home-subpath \"/Library/Caches/TemporaryItems\"))\n"
   "\n"
   "; bug 1237847\n"
   "  (allow file-read*\n"
   "      (subpath appTempDir))\n"
   "  (allow file-write*\n"
   "      (subpath appTempDir))\n"
+  "\n"
+  "; bug 1324610\n"
+  "  (allow network-outbound (literal \"/private/var/run/cupsd\"))\n"
 #ifdef DEBUG
   "\n"
   "; bug 1303987\n"
   "  (allow file-write* (var-folders-regex \"/\"))\n"
 #endif
   ")\n";
 
 bool StartMacSandbox(MacSandboxInfo aInfo, std::string &aErrorMessage)