Title: [266282] trunk/Source/WebKit
Revision
266282
Author
[email protected]
Date
2020-08-28 10:14:51 -0700 (Fri, 28 Aug 2020)

Log Message

[macOS] Fix iokit-get-properties sandbox violations
https://bugs.webkit.org/show_bug.cgi?id=215925

Reviewed by Darin Adler.

A few iokit properties needs to be added to the WebContent process' sandbox after observing these being in use.

* WebProcess/com.apple.WebProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (266281 => 266282)


--- trunk/Source/WebKit/ChangeLog	2020-08-28 17:00:27 UTC (rev 266281)
+++ trunk/Source/WebKit/ChangeLog	2020-08-28 17:14:51 UTC (rev 266282)
@@ -1,3 +1,14 @@
+2020-08-28  Per Arne Vollan  <[email protected]>
+
+        [macOS] Fix iokit-get-properties sandbox violations
+        https://bugs.webkit.org/show_bug.cgi?id=215925
+
+        Reviewed by Darin Adler.
+
+        A few iokit properties needs to be added to the WebContent process' sandbox after observing these being in use.
+
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2020-08-27  John Wilander  <[email protected]>
 
         Remove the feature flag for capped cookies set in 3rd-party CNAME cloaked HTTP responses and add ITP debug logging

Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (266281 => 266282)


--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2020-08-28 17:00:27 UTC (rev 266281)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2020-08-28 17:14:51 UTC (rev 266282)
@@ -212,6 +212,7 @@
     (iokit-property-regex #"^AAPL,(DisplayPipe|OpenCLdisabled|IOGraphics_LER(|_RegTag_1|_RegTag_0|_Busy_2)|alias-policy|boot-display|display-alias|mux-switch-state|ndrv-dev|primary-display|slot-name)")
     (iokit-property-regex #"^ATY,(cbits|fb_(linebytes|offset|size)|intrev)")
     (iokit-property "ATY,DeviceName") ;; Needed by Metal compilers
+    (iokit-property "ATY,EFIDisplay")
     (iokit-property "ATY,FamilyName") ;; Ditto
     (iokit-property "AVCSupported")
     (iokit-property "BacklightHandle")
@@ -222,6 +223,8 @@
     (iokit-property "CapsLockDelay")
     (iokit-property "CaseSensitive")
     (iokit-property "ConfigState")
+    (iokit-property "DPLinkBit")
+    (iokit-property "DPLinkRate")
     (iokit-property "Description")
     (iokit-property "Development")
     (iokit-property-regex #"^Device( Characteristics|EqID)")
@@ -234,7 +237,11 @@
     (iokit-property "Family ID")
     (iokit-property "ForceSupported")
     (iokit-property "Formats")
+    (iokit-property "FramebufferEnabled")
+    (iokit-property "FramebufferStarted")
     (iokit-property "GPUConfigurationVariable")
+    (iokit-property "GPUDCCDisplayable")
+    (iokit-property "GPUDebugNullClientMask")
     (iokit-property "GpuDebugPolicy")
     (iokit-property "GPURawCounterBundleName")
     (iokit-property "GPURawCounterPluginClassName")
@@ -323,6 +330,7 @@
     (iokit-property "Protocol Characteristics")
     (iokit-property "Removable")
     (iokit-property-regex #"^ResetOn(Lock|Unlock)Ms")
+    (iokit-property "SWIP_properties")
     (iokit-property "SafeEjectRequested")
     (iokit-property "SampleRates")
     (iokit-property "Serial Number")
@@ -344,6 +352,7 @@
     (iokit-property "attached-gpu-control-path")
     (iokit-property-regex #"^audio-(codec-info|device-mvalue|device-nvalue|selector)")
     (iokit-property "av-signal-type")
+    (iokit-property "backlight-PWM-freq")
     (iokit-property "bcdVersion")
     (iokit-property-regex #"^(board|device|revision|subsystem|vendor)-id")
     (iokit-property "boot-gamma-restored")
@@ -356,6 +365,11 @@
     (iokit-property "connector-type")
     (iokit-property-regex #"^(device|revision|subsystem-vendor|touch-size)-id")
     (iokit-property "device_type")
+    (iokit-property "display-bpc")
+    (iokit-property "display-connect-flags")
+    (iokit-property "display-link-component-bits")
+    (iokit-property "display-pixel-component-bits")
+    (iokit-property "display-type")
     (iokit-property "dpm")
     (iokit-property "errordb") ;; Needed for OpenGL on older hardware
     (iokit-property "filevault-image") ;; Needed by LaunchServices
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to