Bug 1403567 - Remove unused access to AppleGraphicsPolicyClient iokit from content process; r?haik draft
authorAlex Gaynor <agaynor@mozilla.com>
Tue, 26 Sep 2017 13:05:18 -0400
changeset 671129 1983e4fcf0a27df5589df38386dd0d4c5bbb17ca
parent 671089 35fbf14b96a633c3f66ea13c1a163a3f3a4219b9
child 733423 bc8c693ab820f88e75f1827235e499d460def9a7
push id81836
push userbmo:agaynor@mozilla.com
push dateWed, 27 Sep 2017 14:33:52 +0000
reviewershaik
bugs1403567
milestone58.0a1
Bug 1403567 - Remove unused access to AppleGraphicsPolicyClient iokit from content process; r?haik MozReview-Commit-ID: 9yTMgo2FNKm
security/sandbox/mac/SandboxPolicies.h
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -323,18 +323,17 @@ static const char contentSandboxRules[] 
       (global-name "com.apple.cvmsServ"))
   (allow iokit-open
       (iokit-connection "IOAccelerator")
       (iokit-user-client-class "IOAccelerationUserClient")
       (iokit-user-client-class "IOSurfaceRootUserClient")
       (iokit-user-client-class "IOSurfaceSendRight")
       (iokit-user-client-class "IOFramebufferSharedUserClient")
       (iokit-user-client-class "AGPMClient")
-      (iokit-user-client-class "AppleGraphicsControlClient")
-      (iokit-user-client-class "AppleGraphicsPolicyClient"))
+      (iokit-user-client-class "AppleGraphicsControlClient"))
 
 ; bug 1153809
   (allow iokit-open
       (iokit-user-client-class "NVDVDContextTesla")
       (iokit-user-client-class "Gen6DVDContext"))
 
   ; bug 1237847
   (allow file-read* file-write-data