Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit History

Commits on Sep 23, 2021

• Remove access to unused services in the GPU process

  Show description for 364796a
  pvollan

  committed
  364796a

  Copy full SHA for 364796a

Commits on Sep 3, 2021

• [GPUP] Temporarily allow access to power logging service

  Show description for 82c49db
  pvollan

  committed
  82c49db

  Copy full SHA for 82c49db

Commits on Aug 18, 2021

• [MacOS] Use com.apple.webkit.microphone extension to gate microphone access in GPUProcess sandbox

  Show description for 1a39ead
  youennf

  committed
  1a39ead

  Copy full SHA for 1a39ead

Commits on Jul 30, 2021

• [macOS|AS] VTImageRotationSession returns a kVTImageRotationNotSupportedErr, breaks painting rotated videos

  Show description for 75edc96
  jernoble

  committed
  75edc96

  Copy full SHA for 75edc96

Commits on Jul 15, 2021

• [macOS] Expand GPU sandbox to support multi-target AirPlay

  Show description for 81dc368
  brentfulgham

  committed
  81dc368

  Copy full SHA for 81dc368

Commits on Jun 29, 2021

• Loading WebM hangs if server sends only small amount of data

  Show description for faaa9db
  jernoble

  committed
  faaa9db

  Copy full SHA for faaa9db

Commits on Jun 22, 2021

• [macOS] Deny mach-lookup to the service 'com.apple.print.normalizerd'

  Show description for 7a642e2
  pvollan

  committed
  7a642e2

  Copy full SHA for 7a642e2

Commits on Jun 16, 2021

• Sandbox profiles need to allow loading from /usr/appleinternal/lib on internal builds

  Show description for 2248ec0
  brentfulgham

  committed
  2248ec0

  Copy full SHA for 2248ec0

Commits on Jun 2, 2021

• REGRESSION(r276993): 5 TestWebKitAPI.AudioRoutingArbitration (api-tests) are constant failures

  Show description for 481b651
  jernoble

  committed
  481b651

  Copy full SHA for 481b651

Commits on May 22, 2021

• [Cocoa] Expand sandbox with missing sysctl-read handles for core CPU and cache features

  Show description for d4d3c6c
  brentfulgham

  committed
  d4d3c6c

  Copy full SHA for d4d3c6c

Commits on May 20, 2021

• [macOS] Allow access to the 'DiskImageURL' IOKit property

  Show description for 495a56e
  brentfulgham

  committed
  495a56e

  Copy full SHA for 495a56e

Commits on May 17, 2021

• [GPUP] WebContent process should not pull audio session category from the GPU Process

  Show description for 590f8d6
  pliu6

  committed
  590f8d6

  Copy full SHA for 590f8d6

Commits on May 13, 2021

• [Cocoa] Permit sysctl-read operations needed by Metal and other system frameworks

  Show description for 83fb745
  brentfulgham

  committed
  83fb745

  Copy full SHA for 83fb745

Commits on May 12, 2021

• [Cocoa] Silence uninteresting sandbox reports

  Show description for ef824bb
  brentfulgham

  committed
  ef824bb

  Copy full SHA for ef824bb

Commits on May 8, 2021

• [macOS] [GPU] Process is missing access to IOMobileFramebufferUserClient on Apple Silicon

  Show description for 871756b
  brentfulgham

  committed
  871756b

  Copy full SHA for 871756b

Commits on May 5, 2021

• [Cocoa] Remove access to the unused 'nvram' system command

  Show description for 3c95e14
  brentfulgham

  committed
  3c95e14

  Copy full SHA for 3c95e14

Commits on May 4, 2021

• [Media in GPU Process] Move AudioSessionRoutingArbitratorProxy to the GPU process

  Show description for 44ff4f9
  jernoble

  committed
  44ff4f9

  Copy full SHA for 44ff4f9

Commits on Apr 1, 2021

• [GPU process] Enable CFPrefs direct mode

  Show description for 487e85f
  pvollan

  committed
  487e85f

  Copy full SHA for 487e85f

Commits on Mar 24, 2021

• Update GPUProcess sandbox to support camera access

  Show description for 2c91349
  youennf

  committed
  2c91349

  Copy full SHA for 2c91349

• The media accessibility service is not an XPC service

  Show description for 46d78a8
  pvollan

  committed
  46d78a8

  Copy full SHA for 46d78a8

Commits on Mar 11, 2021

• Add camera-related sandbox extensions to GPUProcess

  Show description for 1ffc5fc
  youennf

  committed
  1ffc5fc

  Copy full SHA for 1ffc5fc

Commits on Mar 9, 2021

• Allow access to more cmio services from Web/GPU processes

  Show description for d36d6fe
  youennf

  committed
  d36d6fe

  Copy full SHA for d36d6fe

Commits on Feb 17, 2021

• [iOS] Remove access to the Mobile asset service

  Show description for 12cce4e
  pvollan

  committed
  12cce4e

  Copy full SHA for 12cce4e

Commits on Feb 16, 2021

• Remove 'com.apple.powerlog.plxpclogger.xpc' from WebKit sandboxes

  Show description for 0f17489
  pvollan

  committed
  0f17489

  Copy full SHA for 0f17489

Commits on Jan 28, 2021

• [macOS] Remove reference to deprecated SubmitDiagInfo.domains path

  Show description for 94fc70e
  brentfulgham

  committed
  94fc70e

  Copy full SHA for 94fc70e

Commits on Jan 26, 2021

• [GPU process][macOS] Only allow access to diagnostic services for internal builds

  Show description for ae245bc
  pvollan

  committed
  ae245bc

  Copy full SHA for ae245bc

Commits on Jan 25, 2021

• [macOS] Restrict access to mds data

  Show description for 915035a
  pvollan

  committed
  915035a

  Copy full SHA for 915035a

Commits on Jan 13, 2021

• [macOS] GPU Process unable to play MSE content due to missing sandbox rules

  Show description for 92bf190
  brentfulgham

  committed
  92bf190

  Copy full SHA for 92bf190

Commits on Dec 10, 2020

• [macOS] Create sandbox extension for AppleAVDUserClient when Media in GPU process is not enabled

  Show description for 6edb769
  pvollan

  committed
  6edb769

  Copy full SHA for 6edb769

Commits on Dec 9, 2020

• [macOS] Allow mach-lookup of com.apple.relatived.tempest in WebKit GPU process

  Show description for fe6817c
  pvollan

  committed
  fe6817c

  Copy full SHA for fe6817c

Commits on Nov 20, 2020

• Unreviewed rollout of r269890 and r269911 due to EME issues on Mac Mini.

  Show description for aeb1980
  brentfulgham

  committed
  aeb1980

  Copy full SHA for aeb1980

Commits on Nov 17, 2020

• [macOS] Remove access to the unused AppleSNBFBUserClient IOKit class

  Show description for bbd0334
  brentfulgham

  committed
  bbd0334

  Copy full SHA for bbd0334

• [macOS] Remove access to the unused AppleIntelMEUserClient IOKit class

  Show description for ce0127b
  brentfulgham

  committed
  ce0127b

  Copy full SHA for ce0127b

Commits on Nov 16, 2020

• [macOS] Remove remote tcp capability from WebContent Sandbox

  Show description for dbe0fe6
  brentfulgham

  committed
  dbe0fe6

  Copy full SHA for dbe0fe6

Commits on Nov 6, 2020

• [macOS] Allow IOAVDHEVCDecodeCapabilities on Intel

  Show description for dc8d26f
  brentfulgham

  committed
  dc8d26f

  Copy full SHA for dc8d26f