mirror of
https://github.com/servo/servo.git
synced 2025-08-05 13:40:08 +01:00
Cargoify servo
This commit is contained in:
parent
db2f642c32
commit
c6ab60dbfc
1761 changed files with 8423 additions and 2294 deletions
32
etc/servo.sb
Normal file
32
etc/servo.sb
Normal file
|
@ -0,0 +1,32 @@
|
|||
(version 1)
|
||||
|
||||
(deny default)
|
||||
|
||||
(allow file*
|
||||
(literal "/dev/dtracehelper")
|
||||
(literal "/dev/urandom")
|
||||
(literal "/dev/null"))
|
||||
|
||||
(allow file-read*
|
||||
(subpath ""))
|
||||
|
||||
(allow file-write*
|
||||
(regex #"^/Users/[^/]+/Library/Autosave Information")
|
||||
(subpath "/private/var"))
|
||||
|
||||
; This is unfortunate...
|
||||
(allow process-exec
|
||||
(regex #"/servo$"))
|
||||
|
||||
(deny file-write*
|
||||
(regex #"/servo$"))
|
||||
|
||||
(allow sysctl-read)
|
||||
(allow sysctl-write)
|
||||
(allow ipc-posix-shm)
|
||||
(allow process-fork)
|
||||
(allow mach-lookup)
|
||||
(allow network-outbound)
|
||||
|
||||
(debug deny)
|
||||
|
Loading…
Add table
Add a link
Reference in a new issue