Title: [271421] trunk/Source/WebKit
- Revision
- 271421
- Author
- [email protected]
- Date
- 2021-01-12 16:06:35 -0800 (Tue, 12 Jan 2021)
Log Message
[macOS] GPU Process unable to play MSE content due to missing sandbox rules
https://bugs.webkit.org/show_bug.cgi?id=220549
<rdar://problem/73047290>
Reviewed by Per Arne Vollan.
Add missing sandbox rules required to support MSE playback in the GPU Process. These
rules were previously added to the WebContent process, but should have also been
included in the GPU Process sandbox.
* GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
* Scripts/process-entitlements.sh:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (271420 => 271421)
--- trunk/Source/WebKit/ChangeLog 2021-01-13 00:05:54 UTC (rev 271420)
+++ trunk/Source/WebKit/ChangeLog 2021-01-13 00:06:35 UTC (rev 271421)
@@ -1,3 +1,18 @@
+2021-01-12 Brent Fulgham <[email protected]>
+
+ [macOS] GPU Process unable to play MSE content due to missing sandbox rules
+ https://bugs.webkit.org/show_bug.cgi?id=220549
+ <rdar://problem/73047290>
+
+ Reviewed by Per Arne Vollan.
+
+ Add missing sandbox rules required to support MSE playback in the GPU Process. These
+ rules were previously added to the WebContent process, but should have also been
+ included in the GPU Process sandbox.
+
+ * GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
+ * Scripts/process-entitlements.sh:
+
2021-01-12 Per Arne Vollan <[email protected]>
[macOS] Reset user directory suffix before getting sandbox directory
Modified: trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in (271420 => 271421)
--- trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in 2021-01-13 00:05:54 UTC (rev 271420)
+++ trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in 2021-01-13 00:06:35 UTC (rev 271421)
@@ -217,6 +217,9 @@
(iokit-property "CapsLockDelay")
(iokit-property "CaseSensitive")
(iokit-property "ConfigState")
+ (iokit-property "DPLanes")
+ (iokit-property "DPLinkBit")
+ (iokit-property "DPLinkRate")
(iokit-property "Description")
(iokit-property "Development")
(iokit-property-regex #"^Device( Characteristics|EqID)")
@@ -229,10 +232,17 @@
(iokit-property "Family ID")
(iokit-property "ForceSupported")
(iokit-property "Formats")
+ (iokit-property "FramebufferEnabled")
+ (iokit-property "FramebufferStarted")
(iokit-property "GPUConfigurationVariable")
+ (iokit-property "GPUDCCDisplayable")
+ (iokit-property "GPUDebugNullClientMask")
(iokit-property "GpuDebugPolicy")
+ (iokit-property "GPURawCounterBundleName")
+ (iokit-property "GPURawCounterPluginClassName")
(iokit-property "HEVCSupported")
(iokit-property "HIDPointerAccelerationType")
+ (iokit-property "HwCtxCacheUpdate")
(iokit-property-regex #"^IOAccel(DisplayPipeCapabilities|Index|Types|Revision)")
(iokit-property-regex #"^IO(Class|MatchCategory|NameMatch)")
(iokit-property-regex #"^IOAudioControl(ChannelID|ID|SubType|Usage|Value)")
@@ -338,6 +348,7 @@
(iokit-property "attached-gpu-control-path")
(iokit-property-regex #"^audio-(codec-info|device-mvalue|device-nvalue|selector)")
(iokit-property "av-signal-type")
+ (iokit-property "backlight-PWM-freq")
(iokit-property "bcdVersion")
(iokit-property-regex #"^(board|device|revision|subsystem|vendor)-id")
(iokit-property "boot-gamma-restored")
@@ -350,6 +361,11 @@
(iokit-property "connector-type")
(iokit-property-regex #"^(device|revision|subsystem-vendor|touch-size)-id")
(iokit-property "device_type")
+ (iokit-property "display-bpc")
+ (iokit-property "display-connect-flags")
+ (iokit-property "display-link-component-bits")
+ (iokit-property "display-pixel-component-bits")
+ (iokit-property "display-type")
(iokit-property "dpm")
(iokit-property "errordb") ;; Needed for OpenGL on older hardware
(iokit-property "filevault-image") ;; Needed by LaunchServices
@@ -400,6 +416,45 @@
#endif
)
+;; <rdar://problem/60088861>
+(if (equal? (param "CPU") "arm64")
+ (allow iokit-get-properties
+ (iokit-property "ADSSupported")
+ (iokit-property "IOAVDHEVCDecodeCapabilities")
+ (iokit-property "IOGLESBundleName") ;; <rdar://problem/67473780>
+ (iokit-property "MetalPluginClassName") ;; <rdar://problem/67473780>
+ (iokit-property "MetalPluginName") ;; <rdar://problem/67473780>
+ (iokit-property "IOSurfaceAcceleratorCapabilitiesDict") ;; <rdar://problem/63696732>
+ (iokit-property "acoustic-id") ;; <rdar://problem/65290967>
+ ))
+
+(if (equal? (param "CPU") "arm64")
+ (with-filter (iokit-registry-entry-class "IOService")
+ (allow iokit-get-properties
+ (iokit-property "IORegistryEntryPropertyKeys"))))
+
+(if (equal? (param "CPU") "arm64")
+ (with-filter (iokit-registry-entry-class "IOMobileFramebuffer")
+ (allow iokit-get-properties
+ (iokit-property "AppleTV"
+ "DisplayPipePlaneBaseAlignment"
+ "DisplayPipeStrideRequirements"
+ "dfr"
+ "external"
+ "hdcp-hoover-protocol"))))
+
+(if (equal? (param "CPU") "arm64")
+ (with-filter (iokit-registry-entry-class "IOPlatformDevice")
+ (allow iokit-get-properties
+ (iokit-property "soc-generation"))))
+
+(if (equal? (param "CPU") "arm64")
+ (with-filter (iokit-registry-entry-class "IOService")
+ (allow iokit-get-properties
+ (iokit-property "chip-id"
+ "display-rotation"
+ "display-scale"))))
+
(deny mach-lookup (xpc-service-name-prefix ""))
(allow mach-lookup
(xpc-service-name "com.apple.PerformanceAnalysis.animationperfd")
@@ -609,6 +664,7 @@
(global-name "com.apple.SystemConfiguration.configd")
(global-name "com.apple.analyticsd")
(global-name "com.apple.assertiond.processassertionconnection")
+ (global-name "com.apple.audio.toolbox.reporting.service")
(global-name "com.apple.audio.SystemSoundServer-OSX")
(global-name "com.apple.audio.audiohald")
(global-name "com.apple.cfprefsd.daemon")
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes