Now that TCC controls access to camera and microphone on macOS, the web process needs to have the following entitlements for our dynamic sandbox extension to work: com.apple.tcc.delegated-services kTCCServiceCamera kTCCServiceMicrophone
<rdar://problem/36674649>
Created attachment 332041 [details] Patch
Committed r227436: <https://trac.webkit.org/changeset/227436>
Comment on attachment 332041 [details] Patch WebContent-OSX.entitlements is only used when the Web Content services needs the domain extension entitlement, which is only when it is relocatable (such as in Safari Technology Preview). Was this patch intended to grant the service this entitlement also when it’s installed as part of macOS or a Safari update?
(In reply to mitz from comment #4) > Comment on attachment 332041 [details] > Patch > > WebContent-OSX.entitlements is only used when the Web Content services needs > the domain extension entitlement, which is only when it is relocatable (such > as in Safari Technology Preview). Was this patch intended to grant the > service this entitlement also when it’s installed as part of macOS or a > Safari update? Yes! Where do those entitlements live?
Dan answered this question in comment 5 in bug 184485.