Bug 1419811 - allow file content processes to access the com.apple.iconservices service; r=Gijs,haik

Directory listing for file URLs needs access to draw icons for files.

MozReview-Commit-ID: KIEx00gB5ia

--HG--
extra : rebase_source : 16aadb2f008f40233a2147dea384d9ed33310cb7
This commit is contained in:
Alex Gaynor 2017-11-22 11:51:32 -06:00
parent 22471e0b18
commit de761e28e1

View File

@ -192,6 +192,12 @@ static const char contentSandboxRules[] = R"(
(if (= macosMinorVersion 9)
(allow mach-lookup (global-name "com.apple.xpcd")))
; File content processes need access to iconservices to draw file icons in
; directory listings
(if (string=? hasFilePrivileges "TRUE")
(allow mach-lookup
(global-name "com.apple.iconservices")))
(allow iokit-open
(iokit-user-client-class "IOHIDParamUserClient")
(iokit-user-client-class "IOAudioEngineUserClient"))