Changeset 271421 in webkit


Ignore:
Timestamp:
Jan 12, 2021 4:06:35 PM (3 years ago)
Author:
Brent Fulgham
Message:

[macOS] GPU Process unable to play MSE content due to missing sandbox rules
https://bugs.webkit.org/show_bug.cgi?id=220549
<rdar://problem/73047290>

Reviewed by Per Arne Vollan.

Add missing sandbox rules required to support MSE playback in the GPU Process. These
rules were previously added to the WebContent process, but should have also been
included in the GPU Process sandbox.

  • GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
  • Scripts/process-entitlements.sh:
Location:
trunk/Source/WebKit
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • trunk/Source/WebKit/ChangeLog

    r271417 r271421  
     12021-01-12  Brent Fulgham  <bfulgham@apple.com>
     2
     3        [macOS] GPU Process unable to play MSE content due to missing sandbox rules
     4        https://bugs.webkit.org/show_bug.cgi?id=220549
     5        <rdar://problem/73047290>
     6
     7        Reviewed by Per Arne Vollan.
     8
     9        Add missing sandbox rules required to support MSE playback in the GPU Process. These
     10        rules were previously added to the WebContent process, but should have also been
     11        included in the GPU Process sandbox.
     12
     13        * GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
     14        * Scripts/process-entitlements.sh:
     15
    1162021-01-12  Per Arne Vollan  <pvollan@apple.com>
    217
  • trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in

    r270657 r271421  
    218218    (iokit-property "CaseSensitive")
    219219    (iokit-property "ConfigState")
     220    (iokit-property "DPLanes")
     221    (iokit-property "DPLinkBit")
     222    (iokit-property "DPLinkRate")
    220223    (iokit-property "Description")
    221224    (iokit-property "Development")
     
    230233    (iokit-property "ForceSupported")
    231234    (iokit-property "Formats")
     235    (iokit-property "FramebufferEnabled")
     236    (iokit-property "FramebufferStarted")
    232237    (iokit-property "GPUConfigurationVariable")
     238    (iokit-property "GPUDCCDisplayable")
     239    (iokit-property "GPUDebugNullClientMask")
    233240    (iokit-property "GpuDebugPolicy")
     241    (iokit-property "GPURawCounterBundleName")
     242    (iokit-property "GPURawCounterPluginClassName")
    234243    (iokit-property "HEVCSupported")
    235244    (iokit-property "HIDPointerAccelerationType")
     245    (iokit-property "HwCtxCacheUpdate")
    236246    (iokit-property-regex #"^IOAccel(DisplayPipeCapabilities|Index|Types|Revision)")
    237247    (iokit-property-regex #"^IO(Class|MatchCategory|NameMatch)")
     
    339349    (iokit-property-regex #"^audio-(codec-info|device-mvalue|device-nvalue|selector)")
    340350    (iokit-property "av-signal-type")
     351    (iokit-property "backlight-PWM-freq")
    341352    (iokit-property "bcdVersion")
    342353    (iokit-property-regex #"^(board|device|revision|subsystem|vendor)-id")
     
    351362    (iokit-property-regex #"^(device|revision|subsystem-vendor|touch-size)-id")
    352363    (iokit-property "device_type")
     364    (iokit-property "display-bpc")
     365    (iokit-property "display-connect-flags")
     366    (iokit-property "display-link-component-bits")
     367    (iokit-property "display-pixel-component-bits")
     368    (iokit-property "display-type")
    353369    (iokit-property "dpm")
    354370    (iokit-property "errordb") ;; Needed for OpenGL on older hardware
     
    401417)
    402418
     419;; <rdar://problem/60088861>
     420(if (equal? (param "CPU") "arm64")
     421    (allow iokit-get-properties
     422        (iokit-property "ADSSupported")
     423        (iokit-property "IOAVDHEVCDecodeCapabilities")
     424        (iokit-property "IOGLESBundleName") ;; <rdar://problem/67473780>
     425        (iokit-property "MetalPluginClassName") ;; <rdar://problem/67473780>
     426        (iokit-property "MetalPluginName") ;; <rdar://problem/67473780>
     427        (iokit-property "IOSurfaceAcceleratorCapabilitiesDict") ;; <rdar://problem/63696732>
     428        (iokit-property "acoustic-id") ;; <rdar://problem/65290967>
     429    ))
     430
     431(if (equal? (param "CPU") "arm64")
     432    (with-filter (iokit-registry-entry-class "IOService")
     433        (allow iokit-get-properties
     434            (iokit-property "IORegistryEntryPropertyKeys"))))
     435
     436(if (equal? (param "CPU") "arm64")
     437    (with-filter (iokit-registry-entry-class "IOMobileFramebuffer")
     438        (allow iokit-get-properties
     439            (iokit-property "AppleTV"
     440                            "DisplayPipePlaneBaseAlignment"
     441                            "DisplayPipeStrideRequirements"
     442                            "dfr"
     443                            "external"
     444                            "hdcp-hoover-protocol"))))
     445
     446(if (equal? (param "CPU") "arm64")
     447    (with-filter (iokit-registry-entry-class "IOPlatformDevice")
     448        (allow iokit-get-properties
     449            (iokit-property "soc-generation"))))
     450
     451(if (equal? (param "CPU") "arm64")
     452    (with-filter (iokit-registry-entry-class "IOService")
     453        (allow iokit-get-properties
     454            (iokit-property "chip-id"
     455                            "display-rotation"
     456                            "display-scale"))))
     457
    403458(deny mach-lookup (xpc-service-name-prefix ""))
    404459(allow mach-lookup
     
    610665       (global-name "com.apple.analyticsd")
    611666       (global-name "com.apple.assertiond.processassertionconnection")
     667       (global-name "com.apple.audio.toolbox.reporting.service")
    612668       (global-name "com.apple.audio.SystemSoundServer-OSX")
    613669       (global-name "com.apple.audio.audiohald")
Note: See TracChangeset for help on using the changeset viewer.