Changeset 280620 in webkit

Timestamp:

Aug 3, 2021, 3:52:11 PM (5 years ago)

Author:

Brent Fulgham

Message:

[iOS] Allow check for nvram "emu" state on internal OS builds
​https://bugs.webkit.org/show_bug.cgi?id=228745
<rdar://problem/78363040>

Reviewed by Per Arne Vollan.

Allow access to the 'emu' nvram variable when running on an Apple Internal OS build. This
reduces spurious sandbox violation reports, and improves the performance of test systems.

• Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb:
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (modified) (1 diff)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2021-08-03  Brent Fulgham  <bfulgham@apple.com>
+
+        [iOS] Allow check for nvram "emu" state on internal OS builds
+        https://bugs.webkit.org/show_bug.cgi?id=228745
+        <rdar://problem/78363040>
+
+        Reviewed by Per Arne Vollan.
+
+        Allow access to the 'emu' nvram variable when running on an Apple Internal OS build. This
+        reduces spurious sandbox violation reports, and improves the performance of test systems.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+
 2021-08-03  Tim Horton  <timothy_horton@apple.com>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb

@@ -601 +601 @@
 (with-filter (system-attribute apple-internal)
     (allow sysctl-read sysctl-write
-           (sysctl-name "vm.footprint_suspend")))
+           (sysctl-name "vm.footprint_suspend"))
+    (allow nvram-get (nvram-variable "emu")) ;; <rdar://problem/78363040>
+)
 
 (allow mach-lookup (with report) (with telemetry)

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in

@@ -383 +383 @@
         (allow file-read* file-write-data file-ioctl
             (literal "/dev/dtracehelper"))
+        (allow nvram-get (nvram-variable "emu")) ;; <rdar://problem/78363040>
     )