<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>226106</bug_id>
          
          <creation_ts>2021-05-21 13:27:51 -0700</creation_ts>
          <short_desc>[Cocoa] Expand IOKit method filters to cover items encountered during testing</short_desc>
          <delta_ts>2021-05-21 15:33:30 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit Misc.</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Brent Fulgham">bfulgham</reporter>
          <assigned_to name="Brent Fulgham">bfulgham</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>pvollan</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1762557</commentid>
    <comment_count>0</comment_count>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2021-05-21 13:27:51 -0700</bug_when>
    <thetext>As we gather more telemetry from systems running with IOKit method filters, we have identified additional methods that are needed for normal use cases.

Per our plan, we will unblock those cases and consider further hardening in an follow-up patch once have worked with framework teams to reduce these needs.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1762574</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2021-05-21 14:04:59 -0700</bug_when>
    <thetext>&lt;rdar://problem/78327511&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1762576</commentid>
    <comment_count>2</comment_count>
      <attachid>429337</attachid>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2021-05-21 14:06:20 -0700</bug_when>
    <thetext>Created attachment 429337
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1762590</commentid>
    <comment_count>3</comment_count>
      <attachid>429337</attachid>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2021-05-21 14:23:58 -0700</bug_when>
    <thetext>Comment on attachment 429337
Patch

Great! R=me.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1762605</commentid>
    <comment_count>4</comment_count>
      <attachid>429337</attachid>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2021-05-21 14:53:27 -0700</bug_when>
    <thetext>Comment on attachment 429337
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=429337&amp;action=review

&gt; Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:294
&gt; +                        39
&gt; +                        40

Should these be under IOSurfaceRootUserClient instead?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1762606</commentid>
    <comment_count>5</comment_count>
      <attachid>429337</attachid>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2021-05-21 14:55:11 -0700</bug_when>
    <thetext>Comment on attachment 429337
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=429337&amp;action=review

&gt; Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:447
&gt; +                    38

Is 42 also needed here?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1762609</commentid>
    <comment_count>6</comment_count>
      <attachid>429337</attachid>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2021-05-21 15:04:50 -0700</bug_when>
    <thetext>Comment on attachment 429337
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=429337&amp;action=review

&gt;&gt; Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:294
&gt;&gt; +                        40
&gt; 
&gt; Should these be under IOSurfaceRootUserClient instead?

No -- these were shown in telemetry to be used by AGXDeviceUserClient, but not by IOSurfaceRootUserClient.

&gt;&gt; Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:447
&gt;&gt; +                    38
&gt; 
&gt; Is 42 also needed here?

No -- but it is needed for AGXDeviceUserClient, whoops! I&apos;ll fix that before landing.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1762610</commentid>
    <comment_count>7</comment_count>
      <attachid>429348</attachid>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2021-05-21 15:05:25 -0700</bug_when>
    <thetext>Created attachment 429348
Patch for landing</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1762620</commentid>
    <comment_count>8</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2021-05-21 15:33:29 -0700</bug_when>
    <thetext>Committed r277894 (238030@main): &lt;https://commits.webkit.org/238030@main&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 429348.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>429337</attachid>
            <date>2021-05-21 14:06:20 -0700</date>
            <delta_ts>2021-05-21 15:05:23 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-226106-20210521140619.patch</filename>
            <type>text/plain</type>
            <size>2213</size>
            <attacher name="Brent Fulgham">bfulgham</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjc3ODgyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No
YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IDY2MjIzNWNjYzM1Yjg0YThl
NGUzM2E1OGI2ZWNjMGMxMjBiMjU4YmMuLjU0NzcwNDdiNjdkNWEzMmVhOTc3MjQ1OTU2YjBmMzdi
YmEwMTFmNzggMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj
ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTYgQEAKKzIwMjEtMDUtMjEgIEJyZW50IEZ1
bGdoYW0gIDxiZnVsZ2hhbUBhcHBsZS5jb20+CisKKyAgICAgICAgW0NvY29hXSBFeHBhbmQgSU9L
aXQgbWV0aG9kIGZpbHRlcnMgdG8gY292ZXIgaXRlbXMgZW5jb3VudGVyZWQgZHVyaW5nIHRlc3Rp
bmcKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIyNjEw
NgorICAgICAgICA8cmRhcjovL3Byb2JsZW0vNzgzMjc1MTE+CisKKyAgICAgICAgUmV2aWV3ZWQg
YnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgQWxsb3cgYWRkaXRpb25hbCBJT0tpdCBtZXRo
b2RzIGJhc2VkIG9uIHRlc3RpbmcgcmVzdWx0cyBhbmQgdGhlIG1ldGhvZCB2YWx1ZXMgd2UgaGl0
IGR1cmluZyBub3JtYWwgb3BlcmF0aW9ucy4KKworICAgICAgICAqIFJlc291cmNlcy9TYW5kYm94
UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYjoKKyAgICAgICAgKiBX
ZWJQcm9jZXNzL2NvbS5hcHBsZS5XZWJQcm9jZXNzLnNiLmluOgorCiAyMDIxLTA1LTIxICBDaHJp
cyBEdW1leiAgPGNkdW1lekBhcHBsZS5jb20+CiAKICAgICAgICAgW0NvY29hXSBVbmFibGUgdG8g
dXBsb2FkIGZpbGVzIHRoYXQgYXJlIHN0b3JlZCBpbiB0aGUgY2xvdWQgKHdpdGhvdXQgYSBsb2Nh
bCBjb3B5KQpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYktpdC9SZXNvdXJjZXMvU2FuZGJveFByb2Zp
bGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQuc2IgYi9Tb3VyY2UvV2ViS2l0L1Jl
c291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5z
YgppbmRleCAxM2U2ZmFkOTNhMTMxYzU5OGQxMjFiYTU2MzJmMjkzMzQ0NWNmNjhiLi4xZDRmNjE1
Mjk2NTYyMDQyNTUzMTg0ZjM2MjAzNzhkYzU0MmU4NGMyIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2Vi
S2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29u
dGVudC5zYgorKysgYi9Tb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9z
L2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYgpAQCAtMjkwLDYgKzI5MCw4IEBACiAgICAg
ICAgICAgICAgICAgICAgICAgICAyNwogICAgICAgICAgICAgICAgICAgICAgICAgMzYKICAgICAg
ICAgICAgICAgICAgICAgICAgIDM4CisgICAgICAgICAgICAgICAgICAgICAgICAzOQorICAgICAg
ICAgICAgICAgICAgICAgICAgNDAKICAgICAgICAgICAgICAgICAgICAgICAgIDQ0CiAgICAgICAg
ICAgICAgICAgICAgICkKICAgICAgICAgICAgICAgICApCkBAIC00NDIsNiArNDQ0LDcgQEAKICAg
ICAgICAgICAgICAgICAgICAgMzQKICAgICAgICAgICAgICAgICAgICAgMzUKICAgICAgICAgICAg
ICAgICAgICAgMzYKKyAgICAgICAgICAgICAgICAgICAgMzgKICAgICAgICAgICAgICAgICApCiAg
ICAgICAgICAgICApCiAgICAgICAgICkKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJLaXQvV2ViUHJv
Y2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbiBiL1NvdXJjZS9XZWJLaXQvV2ViUHJvY2Vz
cy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgppbmRleCA5OWJhYWU2OTc1Mjk3MDJiMzU3MjEw
YzEwMzJmYzAxMzQ5NTY4MmFlLi4yYmFmMjMwODNjMzcyMTcwYTdlMDQyZDczZDk2ZjFmZTAxZTlm
ZWJmIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViS2l0L1dlYlByb2Nlc3MvY29tLmFwcGxlLldlYlBy
b2Nlc3Muc2IuaW4KKysrIGIvU291cmNlL1dlYktpdC9XZWJQcm9jZXNzL2NvbS5hcHBsZS5XZWJQ
cm9jZXNzLnNiLmluCkBAIC0xNjUsNiArMTY1LDcgQEAKICAgICAgICAgICAgICAgICAyNjMKICAg
ICAgICAgICAgICAgICAyNjUKICAgICAgICAgICAgICAgICAyNjcKKyAgICAgICAgICAgICAgICAy
NjgKICAgICAgICAgICAgICAgICA1MTIKICAgICAgICAgICAgICkKICNlbmRpZgo=
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>429348</attachid>
            <date>2021-05-21 15:05:25 -0700</date>
            <delta_ts>2021-05-21 15:33:30 -0700</delta_ts>
            <desc>Patch for landing</desc>
            <filename>bug-226106-20210521150524.patch</filename>
            <type>text/plain</type>
            <size>2242</size>
            <attacher name="Brent Fulgham">bfulgham</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjc3ODgyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No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</data>

          </attachment>
      

    </bug>

</bugzilla>