gecko-dev/ipc/app
Haik Aftandilian 91fff12722 Bug 1827747 - Use a new executable for the macOS GMP process r=nika,glandium
Use a new executable for the GMP process named "<App Name> Media Plugin Helper" so that the content processes (using the plugin-container executable) and the GMP process can be signed with different entitlements allowing for the use of more secure entitlements.

In order for the new executable to load the Widevine plugin, a change is needed in the codesigning infrastructure repo to generate the .sig file for the new executable.

To get the security benefits of using a new executable for GMP, additional changes are needed in the codesigning infrastructure repo to enable signing plugin-container and the new executable with a reduced set of entitlements.

The executable is a copy of plugin-container renamed as "<App Name> Media Plugin Helper" so it appears with a user friendly name in Activity Monitor. For example, "Firefox Media Plugin Helper". (The GMP process runs with limited privileges preventing it from setting its own "nice" process name.)

Pref off the change until the .sig file change lands and media playback has been validated on production builds.

Differential Revision: https://phabricator.services.mozilla.com/D175796
2023-06-05 20:40:10 +00:00
..
macbuild/Contents Bug 1827747 - Use a new executable for the macOS GMP process r=nika,glandium 2023-06-05 20:40:10 +00:00
Makefile.in Bug 1827747 - Use a new executable for the macOS GMP process r=nika,glandium 2023-06-05 20:40:10 +00:00
module.ver
moz.build Bug 1752703 - Move the pthread_thread_create() interposer under mozglue and prepare for having a single place where we place interposer functions r=glandium 2023-05-10 16:33:07 +00:00
MozillaRuntimeMain.cpp
MozillaRuntimeMainAndroid.cpp
plugin-container.exe.manifest