Bug 1386161 - [Mac] Remove IOAudioControl Rules. r?Alex_Gaynor draft
authorHaik Aftandilian <haftandilian@mozilla.com>
Sun, 30 Jul 2017 22:26:06 -0700
changeset 620774 99a757bd86793d158a12a3377901ebedcbe5d95c
parent 620773 7120ee3986f27b1c3ebd9075fd658f4bdbdc970e
child 640803 eeb146f8966eeeb466ff074eb4aa091c71a0e311
push id72150
push userhaftandilian@mozilla.com
push dateThu, 03 Aug 2017 21:53:53 +0000
reviewersAlex_Gaynor
bugs1386161
milestone57.0a1
Bug 1386161 - [Mac] Remove IOAudioControl Rules. r?Alex_Gaynor MozReview-Commit-ID: 3cLUCJDoWlh
security/sandbox/mac/SandboxPolicies.h
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -176,17 +176,16 @@ static const char contentSandboxRules[] 
            (home-regex (string-append "/Library/Preferences/" (regex-quote domain)))))
 
   (allow ipc-posix-shm
       (ipc-posix-name-regex "^/tmp/com.apple.csseed:")
       (ipc-posix-name-regex "^CFPBS:")
       (ipc-posix-name-regex "^AudioIO"))
 
   (allow signal (target self))
-  (allow iokit-set-properties (iokit-property "IOAudioControlValue"))
 
   (allow mach-lookup
       (global-name "com.apple.coreservices.launchservicesd")
       (global-name "com.apple.pasteboard.1")
       (global-name "com.apple.window_proxies")
       (global-name "com.apple.windowserver.active")
       (global-name "com.apple.audio.coreaudiod")
       (global-name "com.apple.audio.audiohald")
@@ -203,17 +202,16 @@ static const char contentSandboxRules[] 
     (allow mach-lookup (global-name "com.apple.audio.AudioComponentRegistrar")))
 
 ; bug 1312273
   (if (= macosMinorVersion 9)
      (allow mach-lookup (global-name "com.apple.xpcd")))
 
   (allow iokit-open
       (iokit-user-client-class "IOHIDParamUserClient")
-      (iokit-user-client-class "IOAudioControlUserClient")
       (iokit-user-client-class "IOAudioEngineUserClient")
       (iokit-user-client-class "IGAccelDevice")
       (iokit-user-client-class "nvDevice")
       (iokit-user-client-class "nvSharedUserClient")
       (iokit-user-client-class "nvFermiGLContext")
       (iokit-user-client-class "IGAccelGLContext")
       (iokit-user-client-class "IGAccelSharedUserClient")
       (iokit-user-client-class "IGAccelVideoContextMain")