Title: [231374] trunk/Source/WebKit
- Revision
- 231374
- Author
- [email protected]
- Date
- 2018-05-04 13:44:36 -0700 (Fri, 04 May 2018)
Log Message
Adjust sandbox profile for simulator.
https://bugs.webkit.org/show_bug.cgi?id=185319
Reviewed by Brent Fulgham.
Disable Kerberos rules, as well as rules related to NSApplication initialization.
* WebProcess/com.apple.WebProcess.sb.in:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (231373 => 231374)
--- trunk/Source/WebKit/ChangeLog 2018-05-04 20:40:24 UTC (rev 231373)
+++ trunk/Source/WebKit/ChangeLog 2018-05-04 20:44:36 UTC (rev 231374)
@@ -1,3 +1,14 @@
+2018-05-04 Per Arne Vollan <[email protected]>
+
+ Adjust sandbox profile for simulator.
+ https://bugs.webkit.org/show_bug.cgi?id=185319
+
+ Reviewed by Brent Fulgham.
+
+ Disable Kerberos rules, as well as rules related to NSApplication initialization.
+
+ * WebProcess/com.apple.WebProcess.sb.in:
+
2018-05-04 Tim Horton <[email protected]>
Wasted time dlopening Lookup when tearing down a WKWebView
Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (231373 => 231374)
--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2018-05-04 20:40:24 UTC (rev 231373)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2018-05-04 20:44:36 UTC (rev 231374)
@@ -643,6 +643,7 @@
(allow mach-lookup
(global-name "com.apple.nehelper"))
+#if PLATFORM(MAC)
;; FIXME should be removed when <rdar://problem/9347205> + related radar in Safari is fixed
(allow mach-lookup
(global-name "org.h5l.kcm")
@@ -649,7 +650,7 @@
(global-name "com.apple.GSSCred")
(global-name "com.apple.system.logger")
(global-name "com.apple.system.notification_center"))
-#if PLATFORM(MAC) && __MAC_OS_X_VERSION_MIN_REQUIRED < 101300
+#if __MAC_OS_X_VERSION_MIN_REQUIRED < 101300
(allow network-outbound
(remote udp))
#endif
@@ -664,6 +665,7 @@
(literal "/private/etc/host")
(subpath "/Library/KerberosPlugins/GSSAPI")
(subpath "/Library/KerberosPlugins/KerberosFrameworkPlugins"))
+#endif
(if (defined? 'vnode-type)
(deny file-write-create (vnode-type SYMLINK)))
@@ -687,6 +689,7 @@
(global-name "com.apple.coreservices.appleevents")
(global-name "com.apple.pasteboard.1")
(global-name "com.apple.speech.recognitionserver"))
+#if PLATFORM(MAC)
;; Also part of unnecessary NSApplication initialization, but we can't block access to these yet, see <rdar://problem/13869765>.
(allow file-read*
(subpath "/Library/Components")
@@ -695,6 +698,7 @@
(home-subpath "/Library/Components")
(home-subpath "/Library/Keyboard Layouts")
(home-subpath "/Library/Input Methods"))
+#endif
;; AirPlay
(allow mach-lookup
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
