Changeset 229638 in webkit

Timestamp:

Mar 15, 2018 1:08:40 PM (6 years ago)

Author:

Brent Fulgham

Message:

[macOS] Correct sandbox violations during Flash playback under ToT WebKit
​https://bugs.webkit.org/show_bug.cgi?id=183672
<rdar://problem/38510839>

Reviewed by Eric Carlson.

• PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in:
• WebProcess/com.apple.WebProcess.sb.in:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in (modified) (9 diffs)
• WebProcess/com.apple.WebProcess.sb.in (modified) (2 diffs)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2018-03-15  Brent Fulgham  <bfulgham@apple.com>
+
+        [macOS] Correct sandbox violations during Flash playback under ToT WebKit
+        https://bugs.webkit.org/show_bug.cgi?id=183672
+        <rdar://problem/38510839>
+
+        Reviewed by Eric Carlson.
+
+        * PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2018-03-15  Brent Fulgham  <bfulgham@apple.com>
 

trunk/Source/WebKit/PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in

@@ -1 @@
-; Copyright (C) 2013-2017 Apple Inc. All rights reserved.
+; Copyright (C) 2013-2018 Apple Inc. All rights reserved.
 ;
 ; Redistribution and use in source and binary forms, with or without
@@ -23 +23 @@
 
 (version 1)
-(deny default)
+(deny default (with partial-symbolication))
 (allow system-audit file-read-metadata)
 
@@ -45 +45 @@
 (allow iokit-get-properties
     (iokit-property-regex #"^AAPL,(DisplayPipe|boot-display|mux-switch-state)")
+    (iokit-property "AGCInfo")
     (iokit-property-regex #"^ATY,fb_(linebytes|offset|size)")
+    (iokit-property "AccelCaps")
     (iokit-property "ActuationSupported")
     (iokit-property "AllowDisplaySleep")
@@ -52 +54 @@
     (iokit-property "CFBundleIdentifier")
     (iokit-property-regex #"^Display(ParameterHandlerUsesCharPtr|ProductID|Routing|SerialNumber|VendorID)")
+    (iokit-property "Development")
     (iokit-property "DeviceEqID")
     (iokit-property "Driver is Ready")
@@ -59 +62 @@
     (iokit-property "ForceSupported")
     (iokit-property "HIDPointerAccelerationType")
-    (iokit-property-regex #"^IOAccel(Index|Revision|Types)")
+    (iokit-property-regex #"^IOAccel(DisplayPipeCapabilities|Index|Revision|Types)")
     (iokit-property-regex #"^IOAudioControl(ChannelID|ID|SubType|Usage)")
     (iokit-property-regex #"^IOAudioDevice(CanBeDefaults|TransportType)")
@@ -81 +84 @@
     (iokit-property "IOGLBundleName")
     (iokit-property "IOGVACodec")
+    (iokit-property "IOGVAVTCapabilities")
+    (iokit-property-regex #"^IOGVA(BGRAEnc|Codec|EncoderRestricted|Scaler)")
     (iokit-property "IOI2CTransactionTypes")
     (iokit-property-regex "^IOGVA[A-Z]+(De|En)code")
@@ -86 +91 @@
     (iokit-property "IOMatchCategory")
     (iokit-property-regex #"^IOName(Match|Matched)")
+    (iokit-property-regex #"^IOPCI(ClassMatch|Express(Capabilities|Link(Status|Capabilities))|PrimaryMatch|MSIMode|Resourced|Tunnelled)")
     (iokit-property "IOPMStrictTreeOrder")
     (iokit-property-regex #"^IOPlatform(SerialNumber|UUID)") ;; Ditto
@@ -91 +97 @@
     (iokit-property "IOProbeScore")
     (iokit-property "IOProviderClass")
+    (iokit-property-regex #"^IOReport(Lures|Legend(|Public))")
     (iokit-property "IOScreenRestoreState")
+    (iokit-property "IOSourceVersion")
     (iokit-property "IOVARendererID")
+    (iokit-property-regex #"^InternalStatistics(|Accm)")
     (iokit-property-regex #"^MT( Built-In|HIDDevice)")
     (iokit-property "MaintainPowerInUILock")
@@ -100 +109 @@
     (iokit-property "NXSystemInfo")
     (iokit-property "NoAutoRoute")
+    (iokit-property-regex #"^PerformanceStatistics(|Accum)")
     (iokit-property "Protocol Characteristics")
     (iokit-property-regex #"^Sensor (Columns|Region (Descriptor|Param)|Rows|Surface (Descriptor|Height|Width))")
     (iokit-property "SupportAudioAUUC")
+    (iokit-property "SurfaceList")
     (iokit-property "TimeStampFiltering")
     (iokit-property "Transport")
+    (iokit-property "VRAM,totalMB")
     (iokit-property "WANTS_FRAMES_IGNORED")
     (iokit-property "board-id")

trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

@@ -291 +291 @@
     (iokit-property "Serial Number")
     (iokit-property "StartupDisplay")
+    (iokit-property "SurfaceList")
     (iokit-property-regex #"^Support(AudioAUUC|sSilentClick|TapToWake)")
     (iokit-property-regex #"^Sensor (Columns|Rows)")
@@ -299 +300 @@
     (iokit-property "Transport")
     (iokit-property "UserClientEnabled")
+    (iokit-property "VRAM,totalMB")
     (iokit-property "WANTS_FRAMES_IGNORED")
     (iokit-property-regex #"^acpi-(device|path)")