Bug 1403210 - Remove unused access to AppleSNBFBUserClient iokit from content process; r?haik draft
authorAlex Gaynor <agaynor@mozilla.com>
Tue, 26 Sep 2017 11:32:01 -0400
changeset 670560 2b2ab491517a28be7209524331b877bc86450c96
parent 670404 bc56729898954e32d3a3731d03d178ed78924c33
child 733275 4722be93e4597740f290a7974643386651e18a1f
push id81674
push userbmo:agaynor@mozilla.com
push dateTue, 26 Sep 2017 17:22:30 +0000
reviewershaik
bugs1403210
milestone58.0a1
Bug 1403210 - Remove unused access to AppleSNBFBUserClient iokit from content process; r?haik MozReview-Commit-ID: K4Z48UFfq2w
security/sandbox/mac/SandboxPolicies.h
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -322,17 +322,16 @@ static const char contentSandboxRules[] 
   (allow mach-lookup
       (global-name "com.apple.cvmsServ"))
   (allow iokit-open
       (iokit-connection "IOAccelerator")
       (iokit-user-client-class "IOAccelerationUserClient")
       (iokit-user-client-class "IOSurfaceRootUserClient")
       (iokit-user-client-class "IOSurfaceSendRight")
       (iokit-user-client-class "IOFramebufferSharedUserClient")
-      (iokit-user-client-class "AppleSNBFBUserClient")
       (iokit-user-client-class "AGPMClient")
       (iokit-user-client-class "AppleGraphicsControlClient")
       (iokit-user-client-class "AppleGraphicsPolicyClient"))
 
 ; bug 1153809
   (allow iokit-open
       (iokit-user-client-class "NVDVDContextTesla")
       (iokit-user-client-class "Gen6DVDContext"))