[SCM] WebKit Debian packaging branch, webkit-1.3, updated. upstream/1.3.7-4207-g178b198

[andersca at apple.com]

The following commit has been merged in the webkit-1.3 branch:
commit f7d01d389ebc7a99ba661a2e033f3f03cc94996e
Author: andersca at apple.com <andersca at apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Date:   Fri Jan 21 21:58:11 2011 +0000

    Fix for <rdar://problem/8896057>
    
    Reviewed by Dan Bernstein and Maciej Stachowiak.
    
    Give the Web Process access to the PubSub agent.
    
    * WebProcess/com.apple.WebProcess.sb:
    
    
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@76391 268f45cc-cd09-0410-ab3c-d52691b4dbfc

diff --git a/Source/WebKit2/ChangeLog b/Source/WebKit2/ChangeLog
index 2edcaaa..ba20a01 100644
--- a/Source/WebKit2/ChangeLog
+++ b/Source/WebKit2/ChangeLog
@@ -1,3 +1,13 @@
+2011-01-21  Anders Carlsson  <andersca at apple.com>
+
+        Reviewed by Dan Bernstein and Maciej Stachowiak.
+
+        Fix for <rdar://problem/8896057>
+
+        Give the Web Process access to the PubSub agent.
+
+        * WebProcess/com.apple.WebProcess.sb:
+
 2011-01-21  Sam Weinig  <sam at webkit.org>
 
         Reviewed by Anders Carlsson.
diff --git a/Source/WebKit2/WebProcess/com.apple.WebProcess.sb b/Source/WebKit2/WebProcess/com.apple.WebProcess.sb
index 2123c95..df57bde 100644
--- a/Source/WebKit2/WebProcess/com.apple.WebProcess.sb
+++ b/Source/WebKit2/WebProcess/com.apple.WebProcess.sb
@@ -124,6 +124,10 @@
 (allow process-fork)
 (allow process-exec (literal "/System/Library/Frameworks/QTKit.framework/Versions/A/Resources/QTKitServer") (with no-sandbox))
 
+;; FIXME: Once <rdar://problem/8900275> has been fixed, these rules can be removed.
+(allow mach-lookup (global-name "com.apple.pubsub.ipc"))
+(allow network-outbound (regex #"^/private/tmp/launch-[^/]+/Render"))
+
 ;; FIXME: Investigate these.
 (allow appleevent-send (appleevent-destination "com.apple.WebProcess"))
 (allow mach-lookup (global-name-regex #"^EPPC-"))

-- 
WebKit Debian packaging