Bug 1403567 - Remove unused access to AppleGraphicsPolicyClient iokit from content process; r=haik
authorAlex Gaynor <agaynor@mozilla.com>
Tue, 26 Sep 2017 13:05:18 -0400
changeset 383970 725654758702332ebde2d2b74a8b5bd14850218f
parent 383969 de65572822c64f97dece3ea4451d57dc98b4a839
child 383971 e7ac83f1710ac5e4c151d9ca6b79ed9a4971e909
push id32617
push userkwierso@gmail.com
push dateMon, 02 Oct 2017 23:02:55 +0000
treeherdermozilla-central@8c6b4fd1d769 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewershaik
bugs1403567
milestone58.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 1403567 - Remove unused access to AppleGraphicsPolicyClient iokit from content process; r=haik MozReview-Commit-ID: 9yTMgo2FNKm
security/sandbox/mac/SandboxPolicies.h
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -309,18 +309,17 @@ static const char contentSandboxRules[] 
       (global-name "com.apple.cvmsServ"))
   (allow iokit-open
       (iokit-connection "IOAccelerator")
       (iokit-user-client-class "IOAccelerationUserClient")
       (iokit-user-client-class "IOSurfaceRootUserClient")
       (iokit-user-client-class "IOSurfaceSendRight")
       (iokit-user-client-class "IOFramebufferSharedUserClient")
       (iokit-user-client-class "AGPMClient")
-      (iokit-user-client-class "AppleGraphicsControlClient")
-      (iokit-user-client-class "AppleGraphicsPolicyClient"))
+      (iokit-user-client-class "AppleGraphicsControlClient"))
 
 ; bug 1153809
   (allow iokit-open
       (iokit-user-client-class "NVDVDContextTesla")
       (iokit-user-client-class "Gen6DVDContext"))
 
   ; bug 1237847
   (allow file-read* file-write-data