|
|
| Line 536: |
Line 536: |
| || | | || |
| These allow access to the extensions and weave subdirectories within the current profile. Read and write access to the profile director is blocked (in other rules). Bug 1295700 was filed to address removing access to sensitive weave sync data. | | These allow access to the extensions and weave subdirectories within the current profile. Read and write access to the profile director is blocked (in other rules). Bug 1295700 was filed to address removing access to sensitive weave sync data. |
| |- id=aar_printing1
| |
| |
| |
| [[#aar_printing1|link]]
| |
| <pre style="border:none;">
| |
| "; printing\n"
| |
| " (allow authorization-right-obtain\n"
| |
| " (right-name \"system.print.operator\")\n"
| |
| " (right-name \"system.printingmanager\"))\n"
| |
| " (allow mach-lookup\n"
| |
| " (global-name \"com.apple.printuitool.agent\")\n"
| |
| " (global-name \"com.apple.printtool.agent\")\n"
| |
| " (global-name \"com.apple.printtool.daemon\")\n"
| |
| " (global-name \"com.apple.sharingd\")\n"
| |
| " (global-name \"com.apple.metadata.mds\")\n"
| |
| " (global-name \"com.apple.mtmd.xpc\")\n"
| |
| " (global-name \"com.apple.FSEvents\")\n"
| |
| " (global-name \"com.apple.locum\")\n"
| |
| " (global-name \"com.apple.ImageCaptureExtension2.presence\"))\n"
| |
| " (allow file-read*\n"
| |
| " (home-literal \"/.cups/lpoptions\")\n"
| |
| " (home-literal \"/.cups/client.conf\")\n"
| |
| " (literal \"/private/etc/cups/lpoptions\")\n"
| |
| " (literal \"/private/etc/cups/client.conf\")\n"
| |
| " (subpath \"/private/etc/cups/ppd\")\n"
| |
| " (literal \"/private/var/run/cupsd\"))\n"
| |
| " (allow-shared-preferences-read \"org.cups.PrintingPrefs\")\n"
| |
| " (allow-shared-preferences-read \"com.apple.finder\")\n"
| |
| " (allow-shared-preferences-read \"com.apple.LaunchServices\")\n"
| |
| " (allow-shared-preferences-read \".GlobalPreferences\")\n"
| |
| " (allow network-outbound\n"
| |
| " (literal \"/private/var/run/cupsd\")\n"
| |
| " (literal \"/private/var/run/mDNSResponder\"))\n"
| |
| "\n"
| |
|
| |
| </pre>
| |
| || Printing
| |
| |- id=aar_misc1 | | |- id=aar_misc1 |
| | | | | |