[WK2][iOS] Remove access to features not present on iOS

https://bugs.webkit.org/show_bug.cgi?id=170531
<rdar://problem/31352258>

Reviewed by Alexey Proskuryakov.

* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@214983 268f45cc-cd09-0410-ab3c-d52691b4dbfc

diff --git a/Source/WebKit2/ChangeLog b/Source/WebKit2/ChangeLog
index 38a9c7c..e74f2b1 100644 (file)
--- a/Source/WebKit2/ChangeLog
+++ b/Source/WebKit2/ChangeLog
@@ -1,3 +1,13 @@
+2017-04-05  Brent Fulgham  <bfulgham@apple.com>
+
+        [WK2][iOS] Remove access to features not present on iOS 
+        https://bugs.webkit.org/show_bug.cgi?id=170531
+        <rdar://problem/31352258>
+
+        Reviewed by Alexey Proskuryakov.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2017-04-05  Eric Carlson  <eric.carlson@apple.com>
 
         [MediaStream] Host application should be able to mute and unmute media streams

diff --git a/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb b/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb
index 0679997..e2435f2 100644 (file)
--- a/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb
+++ b/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb
@@ -120,18 +120,6 @@
         (preference-domain "com.apple.coremedia"))
     (allow file-read* (subpath "/Library/CoreMediaIO/Plug-Ins/DAL"))
     (allow mach-lookup (extension "com.apple.app-sandbox.mach"))
-    (allow mach-lookup
-        (global-name "com.apple.cmio.AppleCameraAssistant")
-        ;; Apple DAL assistants
-        (global-name "com.apple.cmio.VDCAssistant")
-        (global-name "com.apple.cmio.AVCAssistant")
-        (global-name "com.apple.cmio.IIDCVideoAssistant")
-        ;; QuickTimeIIDCDigitizer assistant
-        (global-name "com.apple.IIDCAssistant"))
-    (allow iokit-open
-        ;; QuickTimeUSBVDCDigitizer
-        (iokit-user-client-class "IOUSBDeviceUserClientV2")
-        (iokit-user-client-class "IOUSBInterfaceUserClientV2"))
     (allow device-camera))
 
 ;; Support incoming video connections