[macOS] Modify Audio related sandbox rule

https://bugs.webkit.org/show_bug.cgi?id=251163 rdar://104604967 Reviewed by Brent Fulgham. Modify Audio related sandbox rule in the GPU process on macOS to allow reading subpaths of Audio directory. * Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in: Canonical link: https://commits.webkit.org/259643@main
WebKit · Jan 31, 2023 · c070aff · c070aff
1 parent 62fde07
commit c070aff
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in b/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in
@@ -917,9 +917,7 @@
             (subpath "/private/tmp/AudioCapture")
             (subpath "/tmp/AudioCapture"))
         (allow file-read* (subpath "/usr/local/lib"))
-        (allow file-read-data (path "/AppleInternal/Library/Audio/CASuperBowl"))
-    )
-)
+        (allow file-read-data (subpath "/AppleInternal/Library/Audio"))))
 
 (deny mach-lookup (with no-report)
     (global-name "com.apple.cmio.registerassistantservice.system-extensions"))