[webkit-changes] [WebKit/WebKit] 6fbe1f: [Cocoa][macOS] Allow additional syscall in GPU san...

[Brent Fulgham]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 6fbe1f6d7f5d0bba679cb416add349e095b31896
      https://github.com/WebKit/WebKit/commit/6fbe1f6d7f5d0bba679cb416add349e095b31896
  Author: Brent Fulgham <bfulgham at apple.com>
  Date:   2024-06-28 (Fri, 28 Jun 2024)

  Changed paths:
    M Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in

  Log Message:
  -----------
  [Cocoa][macOS] Allow additional syscall in GPU sandbox
https://bugs.webkit.org/show_bug.cgi?id=275964
<rdar://128572367>

Reviewed by Per Arne Vollan.

Telemetry and performance monitoring indicate that we need to allow
`SYS_open_dprotected_np` in the GPU Process. These calls are already
used in the WebContent and Network sandboxes.

* Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:

Canonical link: https://commits.webkit.org/280484@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications