Bug 1385332 - remove access to the com.apple.pluginkit.pkd mach service from the content process; r?haik draft
authorAlex Gaynor <agaynor@mozilla.com>
Thu, 03 Aug 2017 10:20:07 -0400
changeset 641998 e7f19abbbce080725d1a915fc4a97f7cc2520eea
parent 641632 47248637eafa9a38dade8dc3aa6c4736177c8d8d
child 724870 ba9574e1627f3c76e7223e1e74ab8fd9902bd62f
push id72609
push userbmo:agaynor@mozilla.com
push dateMon, 07 Aug 2017 13:42:05 +0000
reviewershaik
bugs1385332
milestone57.0a1
Bug 1385332 - remove access to the com.apple.pluginkit.pkd mach service from the content process; r?haik MozReview-Commit-ID: 2KYaScrgnll
security/sandbox/mac/SandboxPolicies.h
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -186,18 +186,17 @@ static const char contentSandboxRules[] 
       (global-name "com.apple.coreservices.launchservicesd")
       (global-name "com.apple.pasteboard.1")
       (global-name "com.apple.window_proxies")
       (global-name "com.apple.windowserver.active")
       (global-name "com.apple.audio.coreaudiod")
       (global-name "com.apple.audio.audiohald")
       (global-name "com.apple.SystemConfiguration.configd")
       (global-name "com.apple.iconservices")
-      (global-name "com.apple.cache_delete")
-      (global-name "com.apple.pluginkit.pkd"))
+      (global-name "com.apple.cache_delete"))
 
 ; bug 1376163
   (if (>= macosMinorVersion 13)
     (allow mach-lookup (global-name "com.apple.audio.AudioComponentRegistrar")))
 
 ; bug 1312273
   (if (= macosMinorVersion 9)
      (allow mach-lookup (global-name "com.apple.xpcd")))