1622486 - [macOS] Dedupe Mac sandbox policy files

Status: NEW

(Core :: Security: Process Sandboxing, enhancement, P4)

Description

[Haik Aftandilian [:haik]]

Now that we've added socket and RDD macOS sandbox policies, our policies in security/sandbox/mac/SandboxPolicy*.h contain some duplication. For example, SandboxPolicyContent.h, SandboxPolicyUtility.h, SandboxPolicySocket.h, and SandboxPolicyGMP.h have many of the same basic rules for logging, crash port, and app dir arguments and system library directories. We could have a common policy file including all the rules we need for all processes, and then process-specific policy files which are appended to the common policy at build time. This would be less error prone and ease maintenance to policies.