Skip to content
Permalink
Browse files
[iOS] Remove obsolete graphics message filters
https://bugs.webkit.org/show_bug.cgi?id=240736
<rdar://93527356>

Reviewed by Geoffrey Garen.

Remove obsolete graphics filters in the WebContent process' sandbox on iOS, since this filtering is
now done in other parts of the system.

* Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:

Canonical link: https://commits.webkit.org/250967@main
git-svn-id: https://svn.webkit.org/repository/webkit/trunk@294814 268f45cc-cd09-0410-ab3c-d52691b4dbfc
  • Loading branch information
pvollan committed May 25, 2022
1 parent 5624470 commit f9decae69bc9b30f9f2767a2fe704a154d69ed03
Showing 1 changed file with 4 additions and 51 deletions.
@@ -220,37 +220,12 @@
(allow iokit-open
(require-all
(extension "com.apple.webkit.extension.iokit")
(iokit-connection "IOGPU")
)
(when (defined? 'iokit-external-method)
(apply-message-filter
(deny (with telemetry)
iokit-external-trap)
(allow (with telemetry) (with message "IOGPU")
iokit-async-external-method
iokit-external-method)
)
)
)
(iokit-connection "IOGPU")))

(allow iokit-open
(require-all
(extension "com.apple.webkit.extension.iokit")
(iokit-user-client-class "AGXDeviceUserClient") ;; Used by WebGL
)
(when (defined? 'iokit-external-method)
(apply-message-filter
(deny (with telemetry)
iokit-external-trap)
(deny (with telemetry) (with message "AGXDeviceUserClient")
iokit-async-external-method
iokit-external-method
)
(allow iokit-async-external-method)
(allow iokit-external-method)
)
)
)
(iokit-user-client-class "AGXDeviceUserClient"))) ;; Used by WebGL

(allow iokit-get-properties
(iokit-property "IOGLBundleName")
@@ -367,20 +342,6 @@
(home-subpath "/Library/Assets/com_apple_MobileAsset_VoiceServicesVocalizerVoice"))
)

(define (IOSurfaceRootUserClientMethodFilter)
(when (defined? 'iokit-external-method)
(apply-message-filter
(deny (with telemetry)
iokit-async-external-method
iokit-external-trap)
(allow iokit-async-external-method)
(deny (with telemetry) (with message "IOSurfaceRootUserClient")
iokit-external-method)
(allow iokit-external-method)
)
)
)

;; Things required by UIKit
(define-once (uikit-requirements)
(mobile-preferences-read
@@ -429,10 +390,7 @@
(allow iokit-open
(require-all
(extension "com.apple.webkit.extension.iokit")
(iokit-user-client-class "IOSurfaceRootUserClient") ;; Needed by Tiled Grid code.
)
(IOSurfaceRootUserClientMethodFilter)
)
(iokit-user-client-class "IOSurfaceRootUserClient"))) ;; Needed by Tiled Grid code.

;; Silence sandbox violations from apps trying to create the empty plist if it doesn't exist.
;; <rdar://problem/13796537>
@@ -976,12 +934,7 @@
(allow iokit-open (with telemetry-backtrace)
(require-all
(require-not (extension "com.apple.webkit.extension.iokit"))
(iokit-user-client-class
"IOSurfaceRootUserClient"
)
)
(IOSurfaceRootUserClientMethodFilter)
)
(iokit-user-client-class "IOSurfaceRootUserClient")))

(deny iokit-open (with telemetry)
(require-all

0 comments on commit f9decae

Please sign in to comment.