Title: [245360] trunk/Source/WebKit
Revision
245360
Author
bfulg...@apple.com
Date
2019-05-15 15:27:09 -0700 (Wed, 15 May 2019)

Log Message

Revise sandbox to allow IOKit properties needed by Metal and LaunchServices
https://bugs.webkit.org/show_bug.cgi?id=197924
<rdar://problem/50823976>

Reviewed by Per Arne Vollan.

Update sandbox to allow access to some IOKit properties to avoid sandbox violations that could
lower performance or increase launch times:

* WebProcess/com.apple.WebProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (245359 => 245360)


--- trunk/Source/WebKit/ChangeLog	2019-05-15 22:21:24 UTC (rev 245359)
+++ trunk/Source/WebKit/ChangeLog	2019-05-15 22:27:09 UTC (rev 245360)
@@ -1,3 +1,16 @@
+2019-05-15  Brent Fulgham  <bfulg...@apple.com>
+
+        Revise sandbox to allow IOKit properties needed by Metal and LaunchServices
+        https://bugs.webkit.org/show_bug.cgi?id=197924
+        <rdar://problem/50823976>
+
+        Reviewed by Per Arne Vollan.
+
+        Update sandbox to allow access to some IOKit properties to avoid sandbox violations that could
+        lower performance or increase launch times:
+
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2019-05-15  Chris Dumez  <cdu...@apple.com>
 
         Unreviewed, fix assertion introduced in r245339.

Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (245359 => 245360)


--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2019-05-15 22:21:24 UTC (rev 245359)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2019-05-15 22:27:09 UTC (rev 245360)
@@ -211,6 +211,8 @@
     (iokit-property-regex #"Apple(GVAKeyDoesNotExist|IntelMEVABundleName)")
     (iokit-property-regex #"^AAPL,(DisplayPipe|OpenCLdisabled|IOGraphics_LER(|_RegTag_1|_RegTag_0|_Busy_2)|alias-policy|boot-display|display-alias|mux-switch-state|ndrv-dev|primary-display|slot-name)")
     (iokit-property-regex #"^ATY,(cbits|fb_(linebytes|offset|size)|intrev)")
+    (iokit-property "ATY,DeviceName") ;; Needed by Metal compilers
+    (iokit-property "ATY,FamilyName") ;; Ditto
     (iokit-property "AVCSupported")
     (iokit-property "BacklightHandle")
     (iokit-property "BlockSize")
@@ -353,16 +355,19 @@
     (iokit-property "device_type")
     (iokit-property "dpm")
     (iokit-property "errordb") ;; Needed for OpenGL on older hardware
+    (iokit-property "filevault-image") ;; Needed by LaunchServices
     (iokit-property "graphic-options")
     (iokit-property "hda-gfx")
     (iokit-property-regex #"^id(Product|Vendor)")
     (iokit-property "iofb_version")
     (iokit-property "image-encrypted")
+    (iokit-property "image-path") ;; Needed by LaunchServices
     (iokit-property "locationID") ;; Needed for Audio support on older hardware
     (iokit-property "model")
     (iokit-property "mt-device-id")
     (iokit-property "name")
     (iokit-property "nv-stats")
+    (iokit-property "od-server-name") ;; Needed by LaunchServices
     (iokit-property-regex #"^parser-(options|type)")
     (iokit-property-regex #"^pci(-aspm-default|debug)")
     (iokit-property "port-number")
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to