Bug 1385096 - remove access to the com.apple.bird mach service from the content process; r?haik draft
authorAlex Gaynor <agaynor@mozilla.com>
Thu, 03 Aug 2017 10:14:33 -0400
changeset 621394 12f28b177b58889b2ebe52c430872049f7e9d63a
parent 621327 bc829569880635c52d6e3d54f51cd7d3df180186
child 640996 29b40cb277d050e3c4ae0a306f3c3aa60a946cb8
push id72358
push userbmo:agaynor@mozilla.com
push dateFri, 04 Aug 2017 19:26:10 +0000
reviewershaik
bugs1385096
milestone57.0a1
Bug 1385096 - remove access to the com.apple.bird mach service from the content process; r?haik MozReview-Commit-ID: FqKZVL16zz9
security/sandbox/mac/SandboxPolicies.h
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -188,18 +188,17 @@ static const char contentSandboxRules[] 
       (global-name "com.apple.pasteboard.1")
       (global-name "com.apple.window_proxies")
       (global-name "com.apple.windowserver.active")
       (global-name "com.apple.audio.coreaudiod")
       (global-name "com.apple.audio.audiohald")
       (global-name "com.apple.SystemConfiguration.configd")
       (global-name "com.apple.iconservices")
       (global-name "com.apple.cache_delete")
-      (global-name "com.apple.pluginkit.pkd")
-      (global-name "com.apple.bird"))
+      (global-name "com.apple.pluginkit.pkd"))
 
 ; bug 1376163
   (if (>= macosMinorVersion 13)
     (allow mach-lookup (global-name "com.apple.audio.AudioComponentRegistrar")))
 
 ; bug 1312273
   (if (= macosMinorVersion 9)
      (allow mach-lookup (global-name "com.apple.xpcd")))