Title: [201194] trunk/Source/WebKit2
Revision
201194
Author
[email protected]
Date
2016-05-19 15:55:04 -0700 (Thu, 19 May 2016)

Log Message

[OS X][WK2] Expand sandbox for new mach endpoints
https://bugs.webkit.org/show_bug.cgi?id=157919
<rdar://problem/25238336>

Reviewed by Alexey Proskuryakov.

Grant the WebContent and Networking processes the mach lookup capability for
various Security-related mach endpoints..

* Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

Modified Paths

Diff

Modified: trunk/Source/WebKit2/ChangeLog (201193 => 201194)


--- trunk/Source/WebKit2/ChangeLog	2016-05-19 22:41:06 UTC (rev 201193)
+++ trunk/Source/WebKit2/ChangeLog	2016-05-19 22:55:04 UTC (rev 201194)
@@ -1,3 +1,17 @@
+2016-05-19  Brent Fulgham  <[email protected]>
+
+        [OS X][WK2] Expand sandbox for new mach endpoints
+        https://bugs.webkit.org/show_bug.cgi?id=157919
+        <rdar://problem/25238336>
+
+        Reviewed by Alexey Proskuryakov.
+
+        Grant the WebContent and Networking processes the mach lookup capability for
+        various Security-related mach endpoints..
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2016-05-19  Brian Burg  <[email protected]>
 
         Web Inspector: CRASH when closing a page while element selection mode is enabled via Develop menu

Modified: trunk/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb (201193 => 201194)


--- trunk/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb	2016-05-19 22:41:06 UTC (rev 201193)
+++ trunk/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb	2016-05-19 22:55:04 UTC (rev 201194)
@@ -56,6 +56,9 @@
 (allow mach-lookup
     (global-name "com.apple.ocspd")
     (global-name "com.apple.securityd")
+    (global-name "com.apple.securityd.xpc")
+    (global-name "com.apple.ctkd.token-client")
+    (global-name "com.apple.CoreAuthentication.agent.libxpc")
     (global-name "com.apple.accountsd.accountmanager"))
 
 (deny file-write-create

Modified: trunk/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (201193 => 201194)


--- trunk/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2016-05-19 22:41:06 UTC (rev 201193)
+++ trunk/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2016-05-19 22:55:04 UTC (rev 201194)
@@ -75,6 +75,9 @@
 ;; Various services required by CFNetwork and other frameworks
 (allow mach-lookup
     (global-name "com.apple.PowerManagement.control")
+    (global-name "com.apple.securityd.xpc")
+    (global-name "com.apple.ctkd.token-client")
+    (global-name "com.apple.CoreAuthentication.agent.libxpc")
     (global-name "com.apple.accountsd.accountmanager")
     (global-name "com.apple.coremedia.audiodeviceclock"))
 
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to