[SCM] WebKit Debian packaging branch, webkit-1.3, updated. upstream/1.3.7-4207-g178b198

[timothy at apple.com]

The following commit has been merged in the webkit-1.3 branch:
commit fbf8fe6c11eabe1d3d48cc295d8437b61b149167
Author: timothy at apple.com <timothy at apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Date:   Wed Feb 2 21:19:59 2011 +0000

    Give the Web Process access to the Safari RSS preferences.
    
    <rdar://problem/8916870> Sandbox violation related to RSS during initial
    page load with WebKit2 (prevents RSS from working)
    
    Reviewed by Darin Adler.
    
    * WebProcess/com.apple.WebProcess.sb:
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@77409 268f45cc-cd09-0410-ab3c-d52691b4dbfc

diff --git a/Source/WebKit2/ChangeLog b/Source/WebKit2/ChangeLog
index df49c6a..2acbc8b 100644
--- a/Source/WebKit2/ChangeLog
+++ b/Source/WebKit2/ChangeLog
@@ -1,3 +1,14 @@
+2011-02-02  Timothy Hatcher  <timothy at apple.com>
+
+        Give the Web Process access to the Safari RSS preferences.
+
+        <rdar://problem/8916870> Sandbox violation related to RSS during initial
+        page load with WebKit2 (prevents RSS from working)
+
+        Reviewed by Darin Adler.
+
+        * WebProcess/com.apple.WebProcess.sb:
+
 2011-02-02  Steve Lacey  <sjl at chromium.org>
 
         Reviewed by Eric Carlson.
diff --git a/Source/WebKit2/WebProcess/com.apple.WebProcess.sb b/Source/WebKit2/WebProcess/com.apple.WebProcess.sb
index 030e0d5..dbbb4c9 100644
--- a/Source/WebKit2/WebProcess/com.apple.WebProcess.sb
+++ b/Source/WebKit2/WebProcess/com.apple.WebProcess.sb
@@ -131,6 +131,10 @@
 ;; FIXME: Once <rdar://problem/8900275> has been fixed, these rules can be removed.
 (allow mach-lookup (global-name "com.apple.pubsub.ipc"))
 (allow network-outbound (regex #"^/private/tmp/launch-[^/]+/Render"))
+(allow file-read*
+   (literal (string-append (param "_HOME") "/Library/Preferences/com.apple.Safari.RSS.plist"))
+   (literal (string-append (param "_HOME") "/Library/Preferences/com.apple.Syndication.plist"))
+)
 
 ;; FIXME: Investigate these.
 (allow appleevent-send (appleevent-destination "com.apple.WebProcess"))

-- 
WebKit Debian packaging