Remove access to IOMobileFramebufferUserClient

pvollan · pvollan · commit 0889c5bc2efa · 2021-02-05T17:20:38.000Z
https://bugs.webkit.org/show_bug.cgi?id=221408 <rdar://problem/70551457> Reviewed by Brent Fulgham. Remove access to the IOKit class IOMobileFramebufferUserClient in the WebContent process on macOS and iOS when the GPU process is enabled. * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb: * WebProcess/com.apple.WebProcess.sb.in: Canonical link: https://commits.webkit.org/233743@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@272419 268f45cc-cd09-0410-ab3c-d52691b4dbfc
diff --git a/Source/WebKit/ChangeLog b/Source/WebKit/ChangeLog
@@ -1,3 +1,17 @@
+2021-02-05  Per Arne Vollan  <pvollan@apple.com>
+
+        Remove access to IOMobileFramebufferUserClient
+        https://bugs.webkit.org/show_bug.cgi?id=221408
+        <rdar://problem/70551457>
+
+        Reviewed by Brent Fulgham.
+
+        Remove access to the IOKit class IOMobileFramebufferUserClient in the WebContent process on macOS and iOS
+        when the GPU process is enabled.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2021-02-05  Kate Cheney  <katherine_cheney@apple.com>
 
         CrashTracer: com.apple.WebKit.Networking at WebKit: WebKit::ResourceLoadStatisticsDatabaseStore::setPrevalentResource
diff --git a/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb b/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb
@@ -1012,7 +1012,6 @@
     (require-all
         (require-not (extension "com.apple.webkit.extension.iokit"))
         (iokit-user-client-class
-            "IOMobileFramebufferUserClient"
             "AGXDeviceUserClient"
             "AppleJPEGDriverUserClient"
             "IOSurfaceAcceleratorClient"
diff --git a/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in b/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in
@@ -1829,7 +1829,6 @@
             (require-not (extension "com.apple.webkit.extension.iokit"))
             (iokit-user-client-class
                 "AppleAVDUserClient"
-                "IOMobileFramebufferUserClient"
                 "IOSurfaceAcceleratorClient"
             )
         )

Original file line number	Diff line number	Diff line change
`@@ -1829,7 +1829,6 @@`
`1829`	`1829`	`(require-not (extension "com.apple.webkit.extension.iokit"))`
`1830`	`1830`	`(iokit-user-client-class`
`1831`	`1831`	`"AppleAVDUserClient"`
`1832`		`- "IOMobileFramebufferUserClient"`
`1833`	`1832`	`"IOSurfaceAcceleratorClient"`
`1834`	`1833`	`)`
`1835`	`1834`	`)`