Fix for <rdar://problem/8896057>

Reviewed by Dan Bernstein and Maciej Stachowiak.

Give the Web Process access to the PubSub agent.

* WebProcess/com.apple.WebProcess.sb:



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@76391 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Source/WebKit2/ChangeLog

+2011-01-21  Anders Carlsson  <andersca@apple.com>
+
+        Reviewed by Dan Bernstein and Maciej Stachowiak.
+
+        Fix for <rdar://problem/8896057>
+
+        Give the Web Process access to the PubSub agent.
+
+        * WebProcess/com.apple.WebProcess.sb:
+
 2011-01-21  Sam Weinig  <sam@webkit.org>
         Reviewed by Anders Carlsson.

Source/WebKit2/WebProcess/com.apple.WebProcess.sb

@@ -124,6 +124,10 @@
 (allow process-fork)
 (allow process-exec (literal "/System/Library/Frameworks/QTKit.framework/Versions/A/Resources/QTKitServer") (with no-sandbox))
 
+;; FIXME: Once <rdar://problem/8900275> has been fixed, these rules can be removed.
+(allow mach-lookup (global-name "com.apple.pubsub.ipc"))
+(allow network-outbound (regex #"^/private/tmp/launch-[^/]+/Render"))
+
 ;; FIXME: Investigate these.
 (allow appleevent-send (appleevent-destination "com.apple.WebProcess"))
 (allow mach-lookup (global-name-regex #"^EPPC-"))