Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-19 00:05:36 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 1483058 - [Mac] Camera not accessible by Adobe Flash applets r=Alex_Gaynor

Browse Source 
Allow access to services needed for the Flash plugin to access cameras.

Differential Revision: https://phabricator.services.mozilla.com/D3357

--HG--
extra : moz-landing-system : lando
This commit is contained in:
Haik Aftandilian 2018-08-14 19:58:12 +00:00
parent 8c2d7750a1
commit fd21ba0b31
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
security/sandbox/mac/SandboxPolicies.h
View File

@ -476,6 +476,10 @@ static const char flashPluginSandboxRules[] = R"SANDBOX_LITERAL(
(iokit-user-client-class "AGPMClient")
(iokit-user-client-class "AppleGraphicsControlClient")
(iokit-user-client-class "AppleGraphicsPolicyClient"))
; Camera access
(allow iokit-open
(iokit-user-client-class "IOUSBDeviceUserClientV2")
(iokit-user-client-class "IOUSBInterfaceUserClientV2"))
; Network
(allow file-read*
@ -642,7 +646,6 @@ static const char flashPluginSandboxRules[] = R"SANDBOX_LITERAL(
(local-name "com.apple.tsm.portname")
(global-name "com.apple.axserver")
(global-name "com.apple.pbs.fetch_services")
(global-name "com.apple.tccd.system")
(global-name "com.apple.tsm.uiserver")
(global-name "com.apple.inputmethodkit.launchagent")
(global-name "com.apple.inputmethodkit.launcher")
@ -651,6 +654,14 @@ static const char flashPluginSandboxRules[] = R"SANDBOX_LITERAL(
(global-name "com.apple.windowserver.active")
(global-name "com.apple.trustd.agent")
(global-name "com.apple.ocspd"))
; Required for camera access
(allow mach-lookup
(global-name "com.apple.tccd")
(global-name "com.apple.tccd.system")
(global-name "com.apple.cmio.AppleCameraAssistant")
(global-name "com.apple.cmio.IIDCVideoAssistant")
(global-name "com.apple.cmio.AVCAssistant")
(global-name "com.apple.cmio.VDCAssistant"))
; bug 1475707
(if (= macosMinorVersion 9)
(allow mach-lookup (global-name "com.apple.xpcd")))