Mac: Fix WebGL in OS X 10.7 + misc. Sandbox cleanup

content/browser/gpu.sb

Index: content/browser/gpu.sb
diff --git a/content/browser/gpu.sb b/content/browser/gpu.sb
index 7b6932c4d25b17c2f78e824f6796f9e80ea632cb..cd1f69d5c589262cbc83ad4145f246448e4d4c31 100644
--- a/content/browser/gpu.sb
+++ b/content/browser/gpu.sb
@@ -4,9 +4,21 @@
 ;; found in the LICENSE file.
 ;;
 
-; *** The contents of chrome/common/common.sb are implicitly included here. ***
+; *** The contents of content/common/common.sb are implicitly included here. ***
 
 ; Allow communication between the GPU process and the UI server.
 (allow mach-lookup (global-name "com.apple.tsm.uiserver"))
 
 (allow file-read-metadata (literal "/"))
+
+; Needed for WebGL on OS X 10.7 - crbug.com/75343
+;10.7_OR_ABOVE  (allow iokit-open
+;10.7_OR_ABOVE      (iokit-connection "IOAccelerator")
+;10.7_OR_ABOVE      (iokit-user-client-class "IOAccelerationUserClient")
+;10.7_OR_ABOVE      (iokit-user-client-class "IOFramebufferSharedUserClient")
+;10.7_OR_ABOVE      (iokit-user-client-class "AppleGraphicsControlClient")
+;10.7_OR_ABOVE      (iokit-user-client-class "AGPMClient")
+;10.7_OR_ABOVE      (iokit-user-client-class "IOHIDParamUserClient")
+;10.7_OR_ABOVE      (iokit-user-client-class "RootDomainUserClient")
+;10.7_OR_ABOVE      (iokit-user-client-class "IOSurfaceRootUserClient")
+;10.7_OR_ABOVE      (iokit-user-client-class "IOSurfaceSendRight"))