Bug 1388454 - remove access to the com.apple.pasteboard.1 mach service from content processes; r?haik
MozReview-Commit-ID: EXb6UDYohZT
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -179,17 +179,16 @@ static const char contentSandboxRules[]
(ipc-posix-name-regex "^CFPBS:"))
(allow ipc-posix-shm-read* ipc-posix-shm-write-data
(ipc-posix-name-regex "^AudioIO"))
(allow signal (target self))
(allow mach-lookup
(global-name "com.apple.coreservices.launchservicesd")
- (global-name "com.apple.pasteboard.1")
(global-name "com.apple.audio.coreaudiod")
(global-name "com.apple.audio.audiohald")
(global-name "com.apple.SystemConfiguration.configd")
(global-name "com.apple.iconservices"))
; bug 1376163
(if (>= macosMinorVersion 13)
(allow mach-lookup (global-name "com.apple.audio.AudioComponentRegistrar")))