Bug 1429133 - Some FontExplorer managed fonts are not rendered. r?Alex_Gaynor draft
authorHaik Aftandilian <haftandilian@mozilla.com>
Wed, 10 Jan 2018 11:33:47 -0800
changeset 718671 8afcc65ef186fb2a48b7be8a9e9e09d4fcb6f852
parent 718670 b5033e6fdf1c68b39bbc17a4847b478f80830075
child 745580 00aa59ecb29090864b87660b93c5aa28832b3544
push id95027
push userhaftandilian@mozilla.com
push dateWed, 10 Jan 2018 20:00:50 +0000
reviewersAlex_Gaynor
bugs1429133
milestone59.0a1
Bug 1429133 - Some FontExplorer managed fonts are not rendered. r?Alex_Gaynor MozReview-Commit-ID: L5x3GNb3HGU
security/sandbox/mac/SandboxPolicies.h
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -329,16 +329,20 @@ static const char contentSandboxRules[] 
            #"\.[tT][tT][fF]$"           ; ttf
            #"\.[tT][tT][cC]$"           ; ttc
            #"\.[oO][tT][cC]$"           ; otc
            #"\.[dD][fF][oO][nN][tT]$")) ; dfont
 
   ; bug 1404919
   ; Read access (recursively) within directories ending in .fontvault
   (allow file-read* (regex #"\.fontvault/"))
+
+  ; bug 1429133
+  ; Read access to the default FontExplorer font directory
+  (allow file-read* (home-subpath "/FontExplorer X/Font Library"))
 )";
 
 static const char fileContentProcessAddend[] = R"(
   ; This process has blanket file read privileges
   (allow file-read*)
 
   ; File content processes need access to iconservices to draw file icons in
   ; directory listings