chromium/src
0
Fork 0
Code Activity

mac: Allow two sysctl-reads to common.sb

Browse Source 
These denials were observed in local testing.

Change-Id: Iccfdbdbe4d755ac954bf6757505ee583dd89fa53
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2404411
Reviewed-by: Mark Mentovai <mark@chromium.org>
Commit-Queue: Robert Sesek <rsesek@chromium.org>
Cr-Commit-Position: refs/heads/master@{#805928}
This commit is contained in:
Robert Sesek
2020-09-10 22:03:23 +00:00
committed by Commit Bot
parent 661cd224e3
commit e7390ab0a4
1 changed files with 2 additions and 0 deletions

2
sandbox/policy/mac/common.sb

@ -199,10 +199,12 @@
(sysctl-name "hw.vectorunit")
(sysctl-name "kern.hostname")
(sysctl-name "kern.maxfilesperproc")
(sysctl-name "kern.osproductversion")
(sysctl-name "kern.osrelease")
(sysctl-name "kern.ostype")
(sysctl-name "kern.osvariant_status")
(sysctl-name "kern.osversion")
(sysctl-name "kern.secure_kernel")
(sysctl-name "kern.usrstack64")
(sysctl-name "kern.version")
(sysctl-name "sysctl.proc_cputype")