Title: [286031] trunk/Source/WebKit
Revision
286031
Author
[email protected]
Date
2021-11-18 15:01:18 -0800 (Thu, 18 Nov 2021)

Log Message

[macOS][GPUP] Remove access to mach services in sandbox
https://bugs.webkit.org/show_bug.cgi?id=232208
<rdar://problem/84584565>

Unreviewed, revert minor part of initial patch.

Add back Mach service which is potentially still needed, although telemetry shows no usage.
We will reevaluate the need for this service when more telemetry is available.


* GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (286030 => 286031)


--- trunk/Source/WebKit/ChangeLog	2021-11-18 22:56:56 UTC (rev 286030)
+++ trunk/Source/WebKit/ChangeLog	2021-11-18 23:01:18 UTC (rev 286031)
@@ -1,3 +1,16 @@
+2021-11-18  Per Arne  <[email protected]>
+
+        [macOS][GPUP] Remove access to mach services in sandbox
+        https://bugs.webkit.org/show_bug.cgi?id=232208
+        <rdar://problem/84584565>
+
+        Unreviewed, revert minor part of initial patch.
+
+        Add back Mach service which is potentially still needed, although telemetry shows no usage.
+        We will reevaluate the need for this service when more telemetry is available.
+
+        * GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
+
 2021-11-18  Antoine Quint  <[email protected]>
 
         [Model] add support for getting and setting the camera

Modified: trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in (286030 => 286031)


--- trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in	2021-11-18 22:56:56 UTC (rev 286030)
+++ trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in	2021-11-18 23:01:18 UTC (rev 286031)
@@ -87,6 +87,9 @@
     (allow user-preference-read
         (preference-domain "com.apple.opengl")
         (preference-domain "com.nvidia.OpenGL"))
+    ;; CVMS
+    (allow mach-lookup (with telemetry)
+        (global-name "com.apple.cvmsServ"))
     (allow file-read* (with telemetry)
         (prefix "/private/var/db/CVMS/cvmsCodeSignObj"))
     ;; OpenCL
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to