blob: 576976f0daf356f5a9d8d015bdbb9becadb09d6d [file] [log] [blame]
;; Copyright (c) 2011 The Chromium Authors. All rights reserved.
;; Use of this source code is governed by a BSD-style license that can be
;; found in the LICENSE file.
; *** The contents of are implicitly included here. ***
; Allow communication between the GPU process and the UI server.
(allow mach-lookup (global-name ""))
(allow file-read-metadata (literal "/"))
; Needed for WebGL -
(allow iokit-open
(iokit-connection "IOAccelerator")
(iokit-user-client-class "IOAccelerationUserClient")
(iokit-user-client-class "IOFramebufferSharedUserClient")
(iokit-user-client-class "AppleGraphicsControlClient")
(iokit-user-client-class "AGPMClient")
(iokit-user-client-class "IOHIDParamUserClient")
(iokit-user-client-class "RootDomainUserClient")
(iokit-user-client-class "IOSurfaceRootUserClient")
(iokit-user-client-class "IOSurfaceSendRight"))
(if (param-true? elcap-or-later)
(allow file-read* (subpath "/System/Library/Extensions")))
; Needed for VideoToolbox usage -
(allow mach-lookup (global-name ""))