Skip to content
This repository was archived by the owner on Jun 24, 2022. It is now read-only.

Commit 8f6a90b

Browse files
[iOS] Update sandboxes to address iokit-get-property errors
https://bugs.webkit.org/show_bug.cgi?id=198494 <rdar://problem/51322072> and <rdar://problem/50602737> Reviewed by Alexey Proskuryakov. * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb: git-svn-id: http://svn.webkit.org/repository/webkit/trunk@246123 268f45cc-cd09-0410-ab3c-d52691b4dbfc
1 parent e029656 commit 8f6a90b

File tree

2 files changed

+67
-22
lines changed

2 files changed

+67
-22
lines changed

Source/WebKit/ChangeLog

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,13 @@
1+
2019-06-05 Brent Fulgham <[email protected]>
2+
3+
[iOS] Update sandboxes to address iokit-get-property errors
4+
https://bugs.webkit.org/show_bug.cgi?id=198494
5+
<rdar://problem/51322072> and <rdar://problem/50602737>
6+
7+
Reviewed by Alexey Proskuryakov.
8+
9+
* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
10+
111
2019-06-05 Wenson Hsieh <[email protected]>
212

313
Upstream content mode support into open source from WebKitAdditions

Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

Lines changed: 57 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -268,40 +268,75 @@
268268
(iokit-property-regex #"^AAPL,(DisplayPipe|OpenCLdisabled|IOGraphics_LER(|_RegTag_1|_RegTag_0|_Busy_2)|alias-policy|boot-display|display-alias|mux-switch-state|ndrv-dev|primary-display|slot-name)")
269269
(iokit-property "APTDevice")
270270
(iokit-property "AVCSupported")
271-
(iokit-property-regex #"^AppleJPEG(NumCores|Supports(AppleInterchangeFormats|MissingEOI|RSTLogging))")
272-
(iokit-property "BaseAddressAlignmentRequirement")
273-
(iokit-property-regex #"^DisplayPipe(PlaneBaseAlignment|StrideRequirements)")
274271
(iokit-property "HEVCSupported")
275-
(iokit-property-regex #"^IOGL(|ES(|Metal))BundleName")
276-
(iokit-property "IOGLESDefaultUseMetal")
277272
(iokit-property-regex #"IOGVA(BGRAEnc|Codec|EncoderRestricted|Scaler)")
278273
(iokit-property "IOClassNameOverride")
279274
(iokit-property "IOPlatformUUID")
280-
(iokit-property "IOSurfaceAcceleratorCapabilitiesDict")
281-
(iokit-property-regex #"^MetalPlugin(Name|ClassName)")
282-
(iokit-property "Protocol Characteristics")
283-
(iokit-property "artwork-device-idiom") ;; <rdar://problem/49497720>
284-
(iokit-property "artwork-device-subtype")
285-
(iokit-property "artwork-display-gamut") ;; <rdar://problem/49497788>
286-
(iokit-property "artwork-dynamic-displaymode") ;; <rdar://problem/49497720>
287-
(iokit-property "artwork-scale-factor") ;; <rdar://problem/49497788>
288-
(iokit-property-regex #"(canvas-height|canvas-width)")
289275
(iokit-property "class-code")
290276
(iokit-property "color-accuracy-index")
291-
(iokit-property "compatible-device-fallback") ;; <rdar://problem/49497720>
292277
(iokit-property "device-id")
293278
(iokit-property "device-perf-memory-class")
294279
(iokit-property "emu")
295-
(iokit-property "graphics-featureset-class") ;; <rdar://problem/49497720>
296-
(iokit-property "hdcp-hoover-protocol")
297-
(iokit-property "iommu-present")
298-
(iokit-property "product-description") ;; <rdar://problem/49497788>
299-
(iokit-property "product-id")
300-
(iokit-property "software-behavior")
301280
(iokit-property "vendor-id")
302-
(iokit-property "ui-pip") ;; <rdar://problem/48867037>
303281
)
304282

283+
(with-filter (iokit-registry-entry-class "AppleARMIODevice")
284+
(allow iokit-get-properties
285+
(iokit-property
286+
"canvas-height"
287+
"canvas-width"
288+
)))
289+
290+
(with-filter (iokit-registry-entry-class "AppleJPEGDriver")
291+
(allow iokit-get-properties
292+
(iokit-property-prefix "AppleJPEG")
293+
))
294+
295+
(with-filter (iokit-registry-entry-class "IOAcceleratorES")
296+
(allow iokit-get-properties
297+
(iokit-property "BaseAddressAlignmentRequirement")
298+
(iokit-property-prefix "IOGLES")
299+
(iokit-property "MetalPluginName")
300+
(iokit-property "MetalPluginClassName")
301+
))
302+
303+
(with-filter (iokit-registry-entry-class "IOMobileFramebuffer")
304+
(allow iokit-get-properties
305+
(iokit-property
306+
"DisplayPipePlaneBaseAlignment"
307+
"DisplayPipeStrideRequirements"
308+
"hdcp-hoover-protocol"
309+
)))
310+
311+
(with-filter (iokit-registry-entry-class "IOPlatformDevice")
312+
(allow iokit-get-properties
313+
(iokit-property
314+
"artwork-device-idiom" ;; <rdar://problem/49497720>
315+
"artwork-device-subtype" ;; <rdar://problem/49497720>
316+
"artwork-display-gamut" ;; <rdar://problem/49497788>
317+
"artwork-dynamic-displaymode" ;; <rdar://problem/49497720>
318+
"artwork-scale-factor" ;; <rdar://problem/49497788>
319+
"compatible-device-fallback" ;; <rdar://problem/49497720>
320+
"device-colors" ;; <rdar://problem/51322072>
321+
"device-perf-memory-class" ;; <rdar://problem/51322072>
322+
"display-corner-radius" ;; <rdar://problem/50602737>
323+
"graphics-featureset-class" ;; <rdar://problem/49497720>
324+
"graphics-featureset-fallbacks" ;; <rdar://problem/51322072>
325+
"iommu-present"
326+
"oled-display" ;; <rdar://problem/51322072>
327+
"product-description" ;; <rdar://problem/49497788>
328+
"product-id" ;; <rdar://problem/49497788>
329+
"ui-pip" ;; <rdar://problem/48867037>
330+
)))
331+
332+
(with-filter (iokit-registry-entry-class "IOService")
333+
(allow iokit-get-properties
334+
(iokit-property
335+
"IOSurfaceAcceleratorCapabilitiesDict"
336+
"Protocol Characteristics"
337+
"software-behavior"
338+
)))
339+
305340
;; Read-only preferences and data
306341
(mobile-preferences-read
307342
"com.apple.LaunchServices"

0 commit comments

Comments
 (0)