Changeset 286009 in webkit

Timestamp:

Nov 18, 2021, 9:45:08 AM (5 years ago)

Author:

Russell Epstein

Message:

Cherry-pick r285886. rdar://problem/85473581

[iOS] Limit graphics related IOKit method filtering
​https://bugs.webkit.org/show_bug.cgi?id=233209
<rdar://problem/85473581>

Reviewed by Brent Fulgham.

Limit graphics related IOKit method filtering based on OS version. This patch also adds an entitlement which
will enable a replacement for the disabled filtering.

• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
• Scripts/process-entitlements.sh:

git-svn-id: ​https://svn.webkit.org/repository/webkit/trunk@285886 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Location:

branches/safari-613.1.8-branch/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (modified) (2 diffs)
• Scripts/process-entitlements.sh (modified) (4 diffs)

branches/safari-613.1.8-branch/Source/WebKit/ChangeLog

@@ +1 @@
+2021-11-18  Alan Coon  <alancoon@apple.com>
+
+        Cherry-pick r285886. rdar://problem/85473581
+
+    [iOS] Limit graphics related IOKit method filtering
+    https://bugs.webkit.org/show_bug.cgi?id=233209
+    <rdar://problem/85473581>
+    
+    Reviewed by Brent Fulgham.
+    
+    Limit graphics related IOKit method filtering based on OS version. This patch also adds an entitlement which
+    will enable a replacement for the disabled filtering.
+    
+    * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+    * Scripts/process-entitlements.sh:
+    
+    
+    git-svn-id: https://svn.webkit.org/repository/webkit/trunk@285886 268f45cc-cd09-0410-ab3c-d52691b4dbfc
+
+    2021-11-16  Per Arne Vollan  <pvollan@apple.com>
+
+            [iOS] Limit graphics related IOKit method filtering
+            https://bugs.webkit.org/show_bug.cgi?id=233209
+            <rdar://problem/85473581>
+
+            Reviewed by Brent Fulgham.
+
+            Limit graphics related IOKit method filtering based on OS version. This patch also adds an entitlement which
+            will enable a replacement for the disabled filtering.
+
+            * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+            * Scripts/process-entitlements.sh:
+
 2021-11-18  Alan Coon  <alancoon@apple.com>
 

branches/safari-613.1.8-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in

@@ -263 +263 @@
                 )
                 (allow iokit-async-external-method
-#if PLATFORM(IOS)
+#if PLATFORM(IOS) && __IPHONE_OS_VERSION_MIN_REQUIRED < 160000
                     (iokit-method-number
                         43
@@ -271 +271 @@
                 )
                 (allow iokit-external-method
-#if PLATFORM(IOS)
+#if PLATFORM(IOS) && __IPHONE_OS_VERSION_MIN_REQUIRED < 160000
                     (iokit-method-number
                         0

branches/safari-613.1.8-branch/Source/WebKit/Scripts/process-entitlements.sh

@@ -33 +33 @@
             plistbuddy add :com.apple.coreaudio.allow-vorbis-decode bool YES
         fi
+        if (( "${TARGET_MAC_OS_X_VERSION_MAJOR}" >= 130000 ))
+        then
+            plistbuddy Add :com.apple.private.gpu-restricted bool YES
+        fi
     fi
 
@@ -59 +63 @@
         then
             plistbuddy Add :com.apple.security.cs.jit-write-allowlist bool YES
+        fi
+
+        if (( "${TARGET_MAC_OS_X_VERSION_MAJOR}" >= 130000 ))
+        then
+            plistbuddy Add :com.apple.private.gpu-restricted bool YES
         fi
 
@@ -280 +289 @@
     plistbuddy Add :com.apple.private.coremedia.extensions.audiorecording.allow bool YES
     plistbuddy Add :com.apple.private.coremedia.pidinheritance.allow bool YES
+    plistbuddy Add :com.apple.private.gpu-restricted bool YES
     plistbuddy Add :com.apple.private.memorystatus bool YES
     plistbuddy Add :com.apple.private.network.socket-delegate bool YES
@@ -308 +318 @@
     plistbuddy Add :com.apple.private.allow-explicit-graphics-priority bool YES
     plistbuddy Add :com.apple.private.coremedia.extensions.audiorecording.allow bool YES
+    plistbuddy Add :com.apple.private.gpu-restricted bool YES
     plistbuddy Add :com.apple.private.mediaexperience.startrecordinginthebackground.allow bool YES
     plistbuddy Add :com.apple.private.coremedia.pidinheritance.allow bool YES