From b4ba668be62774b9dcb54b0560e92fd485f6dfc1 Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Tue, 8 Aug 2017 10:15:16 -0400 Subject: [PATCH] Bug 1388360 - remove access to the com.apple.iconservices mach service from content processes; r=haik MozReview-Commit-ID: D20alO2PKR0 --HG-- extra : rebase_source : 2bc809d161eb373220f1de174abc8032207b5dac --- security/sandbox/mac/SandboxPolicies.h | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/security/sandbox/mac/SandboxPolicies.h b/security/sandbox/mac/SandboxPolicies.h index 988f45c2ea29..426e71534007 100644 --- a/security/sandbox/mac/SandboxPolicies.h +++ b/security/sandbox/mac/SandboxPolicies.h @@ -186,8 +186,7 @@ static const char contentSandboxRules[] = R"( (global-name "com.apple.coreservices.launchservicesd") (global-name "com.apple.pasteboard.1") (global-name "com.apple.audio.coreaudiod") - (global-name "com.apple.audio.audiohald") - (global-name "com.apple.iconservices")) + (global-name "com.apple.audio.audiohald")) ; bug 1376163 (if (>= macosMinorVersion 13)