[webkit-changes] [WebKit/WebKit] b069ec: [iOS] Update GPU sandbox to match macOS behavior

[Brent Fulgham]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: b069ece7b5e303fcd1010fadb197164a855f64a8
      https://github.com/WebKit/WebKit/commit/b069ece7b5e303fcd1010fadb197164a855f64a8
  Author: Brent Fulgham <bfulgham at apple.com>
  Date:   2024-07-12 (Fri, 12 Jul 2024)

  Changed paths:
    M Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb.in

  Log Message:
  -----------
  [iOS] Update GPU sandbox to match macOS behavior
https://bugs.webkit.org/show_bug.cgi?id=276498
<rdar://problem/131556690>

Reviewed by Per Arne Vollan.

The iOS GPU sandbox denies access to a few sysctl calls that are allowed on macOS,
and (more importantly) are allowed in the iOS WebContent process. These are showing
up in telemetry when performing media and other web page loads, and are likely to be
impacting performance.

We should allow these sysctl-read calls, as well as a MIG routine needed for proper
memory attribution.

* Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb.in:

Canonical link: https://commits.webkit.org/280924@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications