mirror of
https://github.com/servo/servo.git
synced 2025-08-03 12:40:06 +01:00
Add a simple Servo sandbox profile for Mac.
This does not yet enter the sandbox.
This commit is contained in:
parent
46f47e7a73
commit
90b59b1f50
1 changed files with 29 additions and 0 deletions
29
src/etc/servo.sb
Normal file
29
src/etc/servo.sb
Normal file
|
@ -0,0 +1,29 @@
|
|||
(version 1)
|
||||
|
||||
(deny default)
|
||||
|
||||
(allow file*
|
||||
(literal "/dev/dtracehelper")
|
||||
(literal "/dev/urandom")
|
||||
(literal "/dev/null"))
|
||||
|
||||
(allow file-read*
|
||||
(subpath ""))
|
||||
|
||||
(allow file-write*
|
||||
(regex #"^/Users/[^/]+/Library/Autosave Information")
|
||||
(subpath "/private/var"))
|
||||
|
||||
; This is unfortunate...
|
||||
(allow process-exec
|
||||
(regex #"/servo$"))
|
||||
|
||||
(allow sysctl-read)
|
||||
(allow sysctl-write)
|
||||
(allow ipc-posix-shm)
|
||||
(allow process-fork)
|
||||
(allow mach-lookup)
|
||||
(allow network-outbound)
|
||||
|
||||
(debug deny)
|
||||
|
Loading…
Add table
Add a link
Reference in a new issue