macOS Sandbox: Fix timezone information on 10.13.

This fixes the sandbox rules to access timezone information specifically on 10.13. Bug: 773532 Change-Id: I32dc858a9607b10aa7db4df464a627d02d89b683 Reviewed-on: https://chromium-review.googlesource.com/722203 Reviewed-by: Robert Sesek <[email protected]> Commit-Queue: Greg Kerr <[email protected]> Cr-Original-Commit-Position: refs/heads/master@{#509436}(cherry picked from commit 0af01a8) Reviewed-on: https://chromium-review.googlesource.com/728619 Reviewed-by: Greg Kerr <[email protected]> Cr-Commit-Position: refs/branch-heads/3239@{#74} Cr-Branched-From: adb61db-refs/heads/master@{#508578}
nwjs · Oct 19, 2017 · 1e7395d · 1e7395d
1 parent e40f3d2
commit 1e7395d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/services/service_manager/sandbox/mac/renderer.sb b/services/service_manager/sandbox/mac/renderer.sb
@@ -37,7 +37,8 @@
 
 ; https://crbug.com/754280
 (if (param-true? macos-1013)
-  (allow file-read-data (subpath "/usr/share/zoneinfo.default"))
+  (begin (allow file-read-metadata (path "/private/var/db/timezone/zoneinfo"))
+         (allow file-read-data (subpath "/usr/share/zoneinfo.default")))
   (allow file-read-data (subpath "/usr/share/zoneinfo")))
 
 ; Allow access to the metadata of the /etc symlink.