1386075 - [Mac] Remove (iokit-user-client-class "RootDomainUserClient")

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, enhancement, P1)

Description

[Haik Aftandilian [:haik]]

Allowing opens of "RootDomainUserClient" doesn't sound like something content processes should need. The RootDomain.h header file from /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/Kernel.framework/Versions/A/Headers/IOKit/pwr_mgt/RootDomain.h appears to be related to controlling power management and sleep/wake functionality. The IORegistryExplorer App appears to list instances of RootDomainUserClient and the application using it. plugin-container is not listed on my system which is probably an indication plugin-container does not need/use it.

Comment 1

[Haik Aftandilian [:haik]]

https://treeherder.mozilla.org/#/jobs?repo=try&revision=46d8bc1ed12e787526bd6307d360726ea2d0a9e2

Comment 2

[Haik Aftandilian [:haik]]

Attachment: Bug 1386075 - [Mac] Remove (iokit-user-client-class "RootDomainUserClient").

Review commit: https://reviewboard.mozilla.org/r/165016/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/165016/

Comment 3

[Alex Gaynor [:Alex_Gaynor]]

Comment on attachment 8893950 [details]
Bug 1386075 - [Mac] Remove (iokit-user-client-class "RootDomainUserClient").

https://reviewboard.mozilla.org/r/165016/#review170418

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/c44ad108bdac
[Mac] Remove (iokit-user-client-class "RootDomainUserClient"). r=Alex_Gaynor

Comment 5

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

https://hg.mozilla.org/mozilla-central/rev/c44ad108bdac