Title: [269254] trunk/Source/WebKit
Revision
269254
Author
[email protected]
Date
2020-11-02 10:59:16 -0800 (Mon, 02 Nov 2020)

Log Message

[macOS] Remove unneeded shmem access to ColorSync
https://bugs.webkit.org/show_bug.cgi?id=218395
<rdar://problem/70354916>

Reviewed by Per Arne Vollan.

ColorSync on macOS has not used shared memory since Mac OS X 10.7, and our sandbox
should not have this access. Removing this unused shared memory capability.

* GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
* PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in:
* WebProcess/com.apple.WebProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (269253 => 269254)


--- trunk/Source/WebKit/ChangeLog	2020-11-02 18:53:36 UTC (rev 269253)
+++ trunk/Source/WebKit/ChangeLog	2020-11-02 18:59:16 UTC (rev 269254)
@@ -1,3 +1,18 @@
+2020-11-02  Brent Fulgham  <[email protected]>
+
+        [macOS] Remove unneeded shmem access to ColorSync
+        https://bugs.webkit.org/show_bug.cgi?id=218395
+        <rdar://problem/70354916>
+
+        Reviewed by Per Arne Vollan.
+
+        ColorSync on macOS has not used shared memory since Mac OS X 10.7, and our sandbox
+        should not have this access. Removing this unused shared memory capability.
+
+        * GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
+        * PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2020-11-01  Darin Adler  <[email protected]>
 
         Start removing functions that implicitly use composed tree

Modified: trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in (269253 => 269254)


--- trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in	2020-11-02 18:53:36 UTC (rev 269253)
+++ trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in	2020-11-02 18:59:16 UTC (rev 269254)
@@ -574,15 +574,6 @@
     (ipc-posix-name-regex #"\.PrivateBrowsing-")
     (ipc-posix-name-regex #"^WebKit Test-"))
 
-;; ColorSync
-(allow ipc-posix-shm*
-    (ipc-posix-name "com.apple.ColorSync.Gen.lock")
-    (ipc-posix-name "com.apple.ColorSync.Disp.lock")
-    (ipc-posix-name "com.apple.ColorSync.Gray2.2")
-    (ipc-posix-name "com.apple.ColorSync.sRGB")
-    (ipc-posix-name "com.apple.ColorSync.GenGray")
-    (ipc-posix-name "com.apple.ColorSync.GenRGB"))
-
 ;; Audio
 (allow ipc-posix-shm-read* ipc-posix-shm-write-data
     (ipc-posix-name-regex #"^AudioIO"))

Modified: trunk/Source/WebKit/PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in (269253 => 269254)


--- trunk/Source/WebKit/PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in	2020-11-02 18:53:36 UTC (rev 269253)
+++ trunk/Source/WebKit/PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in	2020-11-02 18:59:16 UTC (rev 269254)
@@ -489,12 +489,6 @@
 (allow ipc-posix-shm*
     (ipc-posix-name-regex #"^AudioIO")
     (ipc-posix-name-regex #"^CFPBS:")
-    (ipc-posix-name "com.apple.ColorSync.Gen.lock")
-    (ipc-posix-name "com.apple.ColorSync.Disp.lock")
-    (ipc-posix-name "com.apple.ColorSync.Gray2.2")
-    (ipc-posix-name "com.apple.ColorSync.sRGB")
-    (ipc-posix-name "com.apple.ColorSync.GenGray")
-    (ipc-posix-name "com.apple.ColorSync.GenRGB")
     (ipc-posix-name-regex #"^com\.apple\.cs\.")
     (ipc-posix-name-regex #"^ls\."))
 (allow ipc-posix-shm-read*

Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (269253 => 269254)


--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2020-11-02 18:53:36 UTC (rev 269253)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2020-11-02 18:59:16 UTC (rev 269254)
@@ -715,15 +715,6 @@
     (ipc-posix-name-regex #"\.PrivateBrowsing-")
     (ipc-posix-name-regex #"^WebKit Test-"))
 
-;; ColorSync
-(allow ipc-posix-shm*
-    (ipc-posix-name "com.apple.ColorSync.Gen.lock")
-    (ipc-posix-name "com.apple.ColorSync.Disp.lock")
-    (ipc-posix-name "com.apple.ColorSync.Gray2.2")
-    (ipc-posix-name "com.apple.ColorSync.sRGB")
-    (ipc-posix-name "com.apple.ColorSync.GenGray")
-    (ipc-posix-name "com.apple.ColorSync.GenRGB"))
-
 ;; Audio
 (allow ipc-posix-shm-read* ipc-posix-shm-write-data
     (ipc-posix-name-regex #"^AudioIO"))
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to