As we gather more telemetry from systems running with IOKit method filters, we have identified additional methods that are needed for normal use cases. Per our plan, we will unblock those cases and consider further hardening in an follow-up patch once have worked with framework teams to reduce these needs.
<rdar://problem/78327511>
Created attachment 429337 [details] Patch
Comment on attachment 429337 [details] Patch Great! R=me.
Comment on attachment 429337 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=429337&action=review > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:294 > + 39 > + 40 Should these be under IOSurfaceRootUserClient instead?
Comment on attachment 429337 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=429337&action=review > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:447 > + 38 Is 42 also needed here?
Comment on attachment 429337 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=429337&action=review >> Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:294 >> + 40 > > Should these be under IOSurfaceRootUserClient instead? No -- these were shown in telemetry to be used by AGXDeviceUserClient, but not by IOSurfaceRootUserClient. >> Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:447 >> + 38 > > Is 42 also needed here? No -- but it is needed for AGXDeviceUserClient, whoops! I'll fix that before landing.
Created attachment 429348 [details] Patch for landing
Committed r277894 (238030@main): <https://commits.webkit.org/238030@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 429348 [details].