Sandbox/OS X Rule Set: Difference between revisions

Jump to navigation Jump to search
Updating section on per-system and per-user Extensions directory
(Remove plugtmp specific because it was removed by the fix for 1288774.)
(Updating section on per-system and per-user Extensions directory)
Line 518: Line 518:
[[#aar_lib_ext|link]]
[[#aar_lib_ext|link]]
<pre style="border:none;">
<pre style="border:none;">
   "   (allow file-read*\n"
   "; Per-user and system-wide Extensions dir\n"
   "       (home-regex \"/Library/Application Support/[^/]+/Extensions/[^/]/\")\n"
  "  (allow file-read*\n"
   "       (resolving-regex \"/Library/Application Support/[^/]+/Extensions/[^/]/\")\n"
   "     (home-regex \"/Library/Application Support/[^/]+/Extensions/[^/]/\")\n"
  "        (home-regex \"/Library/Application Support/Firefox/Profiles/[^/]+/extensions/\")\n"
   "     (resolving-regex \"/Library/Application Support/[^/]+/Extensions/[^/]/\"))\n"
  "        (home-regex \"/Library/Application Support/Firefox/Profiles/[^/]+/weave/\"))\n"
  "\n"
</pre>
</pre>
||
||
Read access to  
See the docs on extensions.autoDisableScopes for more information on these paths. The first path allow access to an Extensions directory that applies to all of a user's profiles. The second is for a system-wide Extensions directory that applies to all users. The setting of extensions.autoDisableScopes controls whether or not these locations are used.
~/Library/Application Support/[^/]+/Extensions/[^/]<br>
~/Library/Application Support/Firefox/Profiles/[^/]+/extensions/<br>
~/Library/Application Support/Firefox/Profiles/[^/]+/weave/<br>
/Library/Application Support/[^/]+/Extension/[^/]/<br>
If these are still needed, the ~/Library rules could be improved to use the specific profile dir, not a regex that matches any of the profiles in the Profiles dir. Filed [https://bugzilla.mozilla.org/show_bug.cgi?id=1290619 bug 1290619] to address the way profile paths are handled.
|- id=aar_home_lib
|- id=aar_home_lib
|
|
202

edits

Navigation menu