Changeset 286031 in webkit


Ignore:
Timestamp:
Nov 18, 2021, 3:01:18 PM (4 years ago)
Author:
pvollan@apple.com
Message:

[macOS][GPUP] Remove access to mach services in sandbox
​https://bugs.webkit.org/show_bug.cgi?id=232208
<rdar://problem/84584565>

Unreviewed, revert minor part of initial patch.

Add back Mach service which is potentially still needed, although telemetry shows no usage.
We will reevaluate the need for this service when more telemetry is available.

  • GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
Location:
trunk/Source/WebKit
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • trunk/Source/WebKit/ChangeLog

    r286023 r286031  
     12021-11-18  Per Arne  <pvollan@apple.com>
     2
     3        [macOS][GPUP] Remove access to mach services in sandbox
     4        https://bugs.webkit.org/show_bug.cgi?id=232208
     5        <rdar://problem/84584565>
     6
     7        Unreviewed, revert minor part of initial patch.
     8
     9        Add back Mach service which is potentially still needed, although telemetry shows no usage.
     10        We will reevaluate the need for this service when more telemetry is available.
     11
     12        * GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
     13
    1142021-11-18  Antoine Quint  <graouts@webkit.org>
    215

  • trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in

    r285977 r286031  
    8888        (preference-domain "com.apple.opengl")
    8989        (preference-domain "com.nvidia.OpenGL"))
     90    ;; CVMS
     91    (allow mach-lookup (with telemetry)
     92        (global-name "com.apple.cvmsServ"))
    9093    (allow file-read* (with telemetry)
    9194        (prefix "/private/var/db/CVMS/cvmsCodeSignObj"))
Note: See TracChangeset for help on using the changeset viewer.