Title: [243531] trunk/Source/WebKit
Revision
243531
Author
bfulg...@apple.com
Date
2019-03-26 17:55:19 -0700 (Tue, 26 Mar 2019)

Log Message

[macOS] Correct kerberos-related sandbox violations
https://bugs.webkit.org/show_bug.cgi?id=196279
<rdar://problem/48622502>

Reviewed by Per Arne Vollan.

We need to allow communications with a Kerberos-related service on macOS
until <rdar://problem/35542803> is fixed.

* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (243530 => 243531)


--- trunk/Source/WebKit/ChangeLog	2019-03-27 00:08:46 UTC (rev 243530)
+++ trunk/Source/WebKit/ChangeLog	2019-03-27 00:55:19 UTC (rev 243531)
@@ -1,3 +1,16 @@
+2019-03-26  Brent Fulgham  <bfulg...@apple.com>
+
+        [macOS] Correct kerberos-related sandbox violations
+        https://bugs.webkit.org/show_bug.cgi?id=196279
+        <rdar://problem/48622502>
+
+        Reviewed by Per Arne Vollan.
+
+        We need to allow communications with a Kerberos-related service on macOS
+        until <rdar://problem/35542803> is fixed.
+
+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+
 2019-03-26  Chris Dumez  <cdu...@apple.com>
 
         [macOS] The network process is not exiting reliably when the WebProcessPool is destroyed

Modified: trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (243530 => 243531)


--- trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2019-03-27 00:08:46 UTC (rev 243530)
+++ trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2019-03-27 00:55:19 UTC (rev 243531)
@@ -94,6 +94,7 @@
         "kCFPreferencesAnyApplication"
         "com.apple.DownloadAssessment"
         "com.apple.WebFoundation"
+        "com.apple.ist.ds.appleconnect2.uat" ;; Remove after <rdar://problem/35542803> ships
         "com.apple.networkConnect"))
 (allow file-read*
     ;; Basic system paths
@@ -226,6 +227,7 @@
 (allow mach-lookup
     (global-name "org.h5l.kcm")
     (global-name "com.apple.GSSCred")
+    (global-name "com.apple.ist.ds.appleconnect.service.kdctunnel") ;; Remove after <rdar://problem/35542803> ships
     (global-name "com.apple.system.logger")
     (global-name "com.apple.system.notification_center"))
 (allow network-outbound
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to