mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-11-24 21:31:04 +00:00
91fff12722
Use a new executable for the GMP process named "<App Name> Media Plugin Helper" so that the content processes (using the plugin-container executable) and the GMP process can be signed with different entitlements allowing for the use of more secure entitlements. In order for the new executable to load the Widevine plugin, a change is needed in the codesigning infrastructure repo to generate the .sig file for the new executable. To get the security benefits of using a new executable for GMP, additional changes are needed in the codesigning infrastructure repo to enable signing plugin-container and the new executable with a reduced set of entitlements. The executable is a copy of plugin-container renamed as "<App Name> Media Plugin Helper" so it appears with a user friendly name in Activity Monitor. For example, "Firefox Media Plugin Helper". (The GMP process runs with limited privileges preventing it from setting its own "nice" process name.) Pref off the change until the .sig file change lands and media playback has been validated on production builds. Differential Revision: https://phabricator.services.mozilla.com/D175796 |
||
---|---|---|
.. | ||
macbuild/Contents | ||
Makefile.in | ||
module.ver | ||
moz.build | ||
MozillaRuntimeMain.cpp | ||
MozillaRuntimeMainAndroid.cpp | ||
plugin-container.exe.manifest |