Bug 1307573 - Remove unused system.sb mach-lookups from OS X content sandbox; r?jimm draft
authorHaik Aftandilian <haftandilian@mozilla.com>
Mon, 03 Oct 2016 17:11:01 -0700
changeset 422579 28771c03d73990e510c6573354db4e7231c71546
parent 420271 0cfd4af826c7371af570d8885162057b9702123e
child 533315 85acb6b77e4b90e8bce8bdb876148676c811c2a2
push id31750
push userhaftandilian@mozilla.com
push dateFri, 07 Oct 2016 22:21:17 +0000
reviewersjimm
bugs1307573
milestone52.0a1
Bug 1307573 - Remove unused system.sb mach-lookups from OS X content sandbox; r?jimm MozReview-Commit-ID: JDnLDbYs2IV
security/sandbox/mac/Sandbox.mm
--- a/security/sandbox/mac/Sandbox.mm
+++ b/security/sandbox/mac/Sandbox.mm
@@ -187,35 +187,16 @@ static const char contentSandboxRules[] 
   "  (literal \"/dev/null\")\n"
   "  (literal \"/dev/zero\"))\n"
   "\n"
   "(allow file-read*\n"
   "  file-write-data\n"
   "  file-ioctl\n"
   "  (literal \"/dev/dtracehelper\"))\n"
   "\n"
-  "(allow mach-lookup\n"
-  "  (global-name \"com.apple.appsleep\")\n"
-  "  (global-name \"com.apple.bsd.dirhelper\")\n"
-  "  (global-name \"com.apple.cfprefsd.agent\")\n"
-  "  (global-name \"com.apple.cfprefsd.daemon\")\n"
-  "  (global-name \"com.apple.diagnosticd\")\n"
-  "  (global-name \"com.apple.espd\")\n"
-  "  (global-name \"com.apple.secinitd\")\n"
-  "  (global-name \"com.apple.system.DirectoryService.libinfo_v1\")\n"
-  "  (global-name \"com.apple.system.logger\")\n"
-  "  (global-name \"com.apple.system.notification_center\")\n"
-  "  (global-name \"com.apple.system.opendirectoryd.libinfo\")\n"
-  "  (global-name \"com.apple.system.opendirectoryd.membership\")\n"
-  "  (global-name \"com.apple.trustd\")\n"
-  "  (global-name \"com.apple.trustd.agent\")\n"
-  "  (global-name \"com.apple.xpc.activity.unmanaged\")\n"
-  "  (global-name \"com.apple.xpcd\")\n"
-  "  (local-name \"com.apple.cfprefsd.agent\"))\n"
-  "\n"
   "; Used to read hw.ncpu, hw.physicalcpu_max, kern.ostype, and others\n"
   "(allow sysctl-read)\n"
   "\n"
   "(begin\n"
   "  (deny default)\n"
   "  (debug deny)\n"
   "\n"
   "  (define resolving-literal literal)\n"