Mac: Allow statting various files needed for use by the defaults system.

This CL allows statting the following files:
1) '/'
2) '/var'

And full read access for various paths where .GlobalPreferences.plist may be present.

The first 2 seem harmless to unblock and the 3rd is used by the default system.

Bug=60917
TEST=Repro steps in bug.
Cleanup: Remove stale TODO

The code in question is no longer needed since Skia has changed to remove the #define in question.

BUG=None
TEST=Compilation shouldn't break

Review URL: http://codereview.chromium.org/4134007

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@65331 0039d316-1c4b-4281-b951-d872f2087c98

chrome/renderer/renderer.sb

@@ -14,8 +14,17 @@
 (allow mach-lookup (global-name "com.apple.FontObjectsServer"))  ; 10.5.6
 ;10.6_ONLY (allow mach-lookup (global-name "com.apple.FontServer"))  ; 10.6
 
-; http://crbug.com/46648
-(allow file-read* (regex #"^/System/Library/ColorSync($|/)"))  ; 10.5.6
+(allow file-read*
+  (regex #"^/System/Library/ColorSync($|/)")  ; 10.5.6 - http://crbug.com/46648
+  (literal "/Library/Preferences/.GlobalPreferences.plist") ; http://crbug.com/60917
+  (literal "@USER_HOMEDIR_AS_LITERAL@/Library/Preferences/.GlobalPreferences.plist")
+)
 
-; USER_HOMEDIR is substitued at runtime - http://crbug.com/11269
+; http://crbug.com/11269
 ;10.6_ONLY (allow file-read* (subpath "@USER_HOMEDIR_AS_LITERAL@/Library/Fonts"))  ; 10.6
+
+; http://crbug.com/60917
+(allow file-read-metadata
+  (literal "/")
+  (literal "/var")
+)