Title: [282841] trunk/Source/WebKit
Revision
282841
Author
pvol...@apple.com
Date
2021-09-21 14:09:30 -0700 (Tue, 21 Sep 2021)

Log Message

Remove preference write access to AX media domain
https://bugs.webkit.org/show_bug.cgi?id=230574
<rdar://58899152>

Reviewed by Brent Fulgham.

This has been brokered to the UI process, so there should no longer be any need to write to the AX media domain in WebKit processes.

* Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb:
* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (282840 => 282841)


--- trunk/Source/WebKit/ChangeLog	2021-09-21 21:09:12 UTC (rev 282840)
+++ trunk/Source/WebKit/ChangeLog	2021-09-21 21:09:30 UTC (rev 282841)
@@ -1,3 +1,16 @@
+2021-09-21  Per Arne  <pvol...@apple.com>
+
+        Remove preference write access to AX media domain
+        https://bugs.webkit.org/show_bug.cgi?id=230574
+        <rdar://58899152>
+
+        Reviewed by Brent Fulgham.
+
+        This has been brokered to the UI process, so there should no longer be any need to write to the AX media domain in WebKit processes.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+
 2021-09-21  Fujii Hironori  <hironori.fu...@sony.com>
 
         [WinCairo] jquery/offset.html is randomly failing an assertion in DrawingAreaCoordinatedGraphics::layerHostDidFlushLayers

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb (282840 => 282841)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb	2021-09-21 21:09:12 UTC (rev 282840)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb	2021-09-21 21:09:30 UTC (rev 282841)
@@ -82,10 +82,6 @@
     (allow-preferences-common)
     (allow user-preference-read (apply preference-domain domains)))
 
-(define-once (mobile-preferences-read-write . domains)
-    (allow-preferences-common)
-    (allow user-preference-read user-preference-write (apply preference-domain domains)))
-
 (define-once (framebuffer-access)
     (allow iokit-open
            (iokit-user-client-class "IOMobileFramebufferUserClient")
@@ -245,7 +241,7 @@
 
     ;; <rdar://problem/12250145>
     (mobile-preferences-read "com.apple.mediaaccessibility")
-    (mobile-preferences-read-write "com.apple.mediaaccessibility.public")
+    (mobile-preferences-read "com.apple.mediaaccessibility.public")
 )
 
 (define-once (url-translation)

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (282840 => 282841)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in	2021-09-21 21:09:12 UTC (rev 282840)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in	2021-09-21 21:09:30 UTC (rev 282841)
@@ -82,10 +82,6 @@
     (allow-preferences-common)
     (allow user-preference-read (apply preference-domain domains)))
 
-(define-once (mobile-preferences-read-write . domains)
-    (allow-preferences-common)
-    (allow user-preference-read user-preference-write (apply preference-domain domains)))
-
 (define-once (framebuffer-access)
     (allow iokit-open
         (require-all
@@ -205,7 +201,7 @@
 (define-once (media-accessibility-support)
     ;; <rdar://problem/12250145>
     (mobile-preferences-read "com.apple.mediaaccessibility")
-    (mobile-preferences-read-write "com.apple.mediaaccessibility.public")
+    (mobile-preferences-read "com.apple.mediaaccessibility.public")
 )
 
 (define-once (url-translation)
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to