Bug 1386075 - [Mac] Remove (iokit-user-client-class "RootDomainUserClient"). r?Alex_Gaynor draft
authorHaik Aftandilian <haftandilian@mozilla.com>
Thu, 03 Aug 2017 13:29:55 -0700
changeset 621402 d956a31cdf0b2ffdc9e751ff6b74dd891481675d
parent 620773 7120ee3986f27b1c3ebd9075fd658f4bdbdc970e
child 724656 0e4ec32091b0ba99a78615a715105f61e71499d8
push id72364
push userhaftandilian@mozilla.com
push dateFri, 04 Aug 2017 19:44:56 +0000
reviewersAlex_Gaynor
bugs1386075
milestone57.0a1
Bug 1386075 - [Mac] Remove (iokit-user-client-class "RootDomainUserClient"). r?Alex_Gaynor MozReview-Commit-ID: 2bM5KVIbdru
security/sandbox/mac/SandboxPolicies.h
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -213,18 +213,17 @@ static const char contentSandboxRules[] 
       (iokit-user-client-class "IGAccelDevice")
       (iokit-user-client-class "nvDevice")
       (iokit-user-client-class "nvSharedUserClient")
       (iokit-user-client-class "nvFermiGLContext")
       (iokit-user-client-class "IGAccelGLContext")
       (iokit-user-client-class "IGAccelSharedUserClient")
       (iokit-user-client-class "IGAccelVideoContextMain")
       (iokit-user-client-class "IGAccelVideoContextMedia")
-      (iokit-user-client-class "IGAccelVideoContextVEBox")
-      (iokit-user-client-class "RootDomainUserClient"))
+      (iokit-user-client-class "IGAccelVideoContextVEBox"))
 
 ; depending on systems, the 1st, 2nd or both rules are necessary
   (allow-shared-preferences-read "com.apple.HIToolbox")
   (allow file-read-data (literal "/Library/Preferences/com.apple.HIToolbox.plist"))
 
   (allow-shared-preferences-read "com.apple.ATS")
   (allow file-read-data (literal "/Library/Preferences/.GlobalPreferences.plist"))