Title: [294814] trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in
- Revision
- 294814
- Author
- pvol...@apple.com
- Date
- 2022-05-25 11:55:19 -0700 (Wed, 25 May 2022)
Log Message
[iOS] Remove obsolete graphics message filters
https://bugs.webkit.org/show_bug.cgi?id=240736
<rdar://93527356>
Reviewed by Geoffrey Garen.
Remove obsolete graphics filters in the WebContent process' sandbox on iOS, since this filtering is
now done in other parts of the system.
* Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
Canonical link: https://commits.webkit.org/250967@main
Modified Paths
Diff
Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (294813 => 294814)
--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in 2022-05-25 18:47:39 UTC (rev 294813)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in 2022-05-25 18:55:19 UTC (rev 294814)
@@ -220,37 +220,12 @@
(allow iokit-open
(require-all
(extension "com.apple.webkit.extension.iokit")
- (iokit-connection "IOGPU")
- )
- (when (defined? 'iokit-external-method)
- (apply-message-filter
- (deny (with telemetry)
- iokit-external-trap)
- (allow (with telemetry) (with message "IOGPU")
- iokit-async-external-method
- iokit-external-method)
- )
- )
- )
+ (iokit-connection "IOGPU")))
(allow iokit-open
(require-all
(extension "com.apple.webkit.extension.iokit")
- (iokit-user-client-class "AGXDeviceUserClient") ;; Used by WebGL
- )
- (when (defined? 'iokit-external-method)
- (apply-message-filter
- (deny (with telemetry)
- iokit-external-trap)
- (deny (with telemetry) (with message "AGXDeviceUserClient")
- iokit-async-external-method
- iokit-external-method
- )
- (allow iokit-async-external-method)
- (allow iokit-external-method)
- )
- )
- )
+ (iokit-user-client-class "AGXDeviceUserClient"))) ;; Used by WebGL
(allow iokit-get-properties
(iokit-property "IOGLBundleName")
@@ -367,20 +342,6 @@
(home-subpath "/Library/Assets/com_apple_MobileAsset_VoiceServicesVocalizerVoice"))
)
-(define (IOSurfaceRootUserClientMethodFilter)
- (when (defined? 'iokit-external-method)
- (apply-message-filter
- (deny (with telemetry)
- iokit-async-external-method
- iokit-external-trap)
- (allow iokit-async-external-method)
- (deny (with telemetry) (with message "IOSurfaceRootUserClient")
- iokit-external-method)
- (allow iokit-external-method)
- )
- )
-)
-
;; Things required by UIKit
(define-once (uikit-requirements)
(mobile-preferences-read
@@ -429,10 +390,7 @@
(allow iokit-open
(require-all
(extension "com.apple.webkit.extension.iokit")
- (iokit-user-client-class "IOSurfaceRootUserClient") ;; Needed by Tiled Grid code.
- )
- (IOSurfaceRootUserClientMethodFilter)
- )
+ (iokit-user-client-class "IOSurfaceRootUserClient"))) ;; Needed by Tiled Grid code.
;; Silence sandbox violations from apps trying to create the empty plist if it doesn't exist.
;; <rdar://problem/13796537>
@@ -976,12 +934,7 @@
(allow iokit-open (with telemetry-backtrace)
(require-all
(require-not (extension "com.apple.webkit.extension.iokit"))
- (iokit-user-client-class
- "IOSurfaceRootUserClient"
- )
- )
- (IOSurfaceRootUserClientMethodFilter)
-)
+ (iokit-user-client-class "IOSurfaceRootUserClient")))
(deny iokit-open (with telemetry)
(require-all
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
