Bug 1389535 - remove access to com.apple.coreservices.launchservicesd from content processes; r?haik
MozReview-Commit-ID: 8uOZmYGxJDK
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -178,17 +178,16 @@ static const char contentSandboxRules[]
(allow ipc-posix-shm-read-data ipc-posix-shm-write-data
(ipc-posix-name-regex "^CFPBS:"))
(allow ipc-posix-shm-read* ipc-posix-shm-write-data
(ipc-posix-name-regex "^AudioIO"))
(allow signal (target self))
(allow mach-lookup
- (global-name "com.apple.coreservices.launchservicesd")
(global-name "com.apple.audio.coreaudiod")
(global-name "com.apple.audio.audiohald"))
; bug 1376163
(if (>= macosMinorVersion 13)
(allow mach-lookup (global-name "com.apple.audio.AudioComponentRegistrar")))
; bug 1312273