202
edits
Sandbox/OS X Rule Set: Difference between revisions
Jump to navigation
Jump to search
Annotated Rules
Haftandilian (talk | contribs) (Annotated Rules) |
Haftandilian (talk | contribs) (Annotated Rules) |
||
| Line 329: | Line 329: | ||
" (allow-shared-preferences-read \"com.apple.ATS\")\n" | " (allow-shared-preferences-read \"com.apple.ATS\")\n" | ||
" (allow file-read-data (literal \"/Library/Preferences/.GlobalPreferences.plist\"))\n" | " (allow file-read-data (literal \"/Library/Preferences/.GlobalPreferences.plist\"))\n" | ||
</pre> | |||
|| TODO | |||
|- | |||
| | |||
<pre style="border:none;"> | |||
" (allow file-read*\n" | " (allow file-read*\n" | ||
" (subpath \"/Library/Fonts\")\n" | " (subpath \"/Library/Fonts\")\n" | ||
| Line 340: | Line 344: | ||
" (literal \"/private/tmp\")\n" | " (literal \"/private/tmp\")\n" | ||
" (literal \"/private/var/tmp\")\n" | " (literal \"/private/var/tmp\")\n" | ||
</pre> | |||
|| | |||
Filesystem read access to some system directories. | |||
|- | |||
| | |||
<pre style="border:none;"> | |||
" (home-literal \"/.CFUserTextEncoding\")\n" | " (home-literal \"/.CFUserTextEncoding\")\n" | ||
</pre> | |||
|| | |||
Filesystem read access to file ~/.CFUserTextEncoding (stores the user's default text encoding.) | |||
|- | |||
| | |||
<pre style="border:none;"> | |||
" (home-literal \"/Library/Preferences/com.apple.DownloadAssessment.plist\")\n" | " (home-literal \"/Library/Preferences/com.apple.DownloadAssessment.plist\")\n" | ||
" (home-subpath \"/Library/Colors\")\n" | " (home-subpath \"/Library/Colors\")\n" | ||
| Line 350: | Line 365: | ||
" (home-subpath \"/Library/PDF Services\")\n" | " (home-subpath \"/Library/PDF Services\")\n" | ||
" (home-subpath \"/Library/Spelling\")\n" | " (home-subpath \"/Library/Spelling\")\n" | ||
</pre> | |||
|| Filesystem read access to these ~/Library subdirectories. | |||
|- | |||
| | |||
<pre style="border:none;"> | |||
" (subpath appdir-path)\n" | " (subpath appdir-path)\n" | ||
</pre> | |||
|| TODO | |||
|- | |||
| | |||
<pre style="border:none;"> | |||
" (literal appPath)\n" | " (literal appPath)\n" | ||
" (literal appBinaryPath))\n" | " (literal appBinaryPath))\n" | ||