Bug 1385332 - remove access to the com.apple.pluginkit.pkd mach service from the content process; r?haik
MozReview-Commit-ID: 2KYaScrgnll
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -186,18 +186,17 @@ static const char contentSandboxRules[]
(global-name "com.apple.coreservices.launchservicesd")
(global-name "com.apple.pasteboard.1")
(global-name "com.apple.window_proxies")
(global-name "com.apple.windowserver.active")
(global-name "com.apple.audio.coreaudiod")
(global-name "com.apple.audio.audiohald")
(global-name "com.apple.SystemConfiguration.configd")
(global-name "com.apple.iconservices")
- (global-name "com.apple.cache_delete")
- (global-name "com.apple.pluginkit.pkd"))
+ (global-name "com.apple.cache_delete"))
; bug 1376163
(if (>= macosMinorVersion 13)
(allow mach-lookup (global-name "com.apple.audio.AudioComponentRegistrar")))
; bug 1312273
(if (= macosMinorVersion 9)
(allow mach-lookup (global-name "com.apple.xpcd")))