Bug 205456

Summary: Remove syscall filtering from GPU Process sandbox
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit2Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, thorton, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch thorton: review+

Description Brent Fulgham 2019-12-19 09:06:58 PST 
We don't have a fully built-out GPU Process yet. Let's not lock down the syscall filter set until we know which are actually needed by the process. The current set is just copied over from the WebContent process, and are not likely to be the correct set.
Comment 1 Radar WebKit Bug Importer 2019-12-19 09:09:19 PST 
<rdar://problem/58080834>
Comment 2 Brent Fulgham 2019-12-19 09:12:26 PST 
Created attachment 386109 [details]
Patch
Comment 3 Brent Fulgham 2019-12-19 09:59:40 PST 
Committed r253761: <https://trac.webkit.org/changeset/253761>