Title: [239611] trunk/Source/WebKit
- Revision
- 239611
- Author
- [email protected]
- Date
- 2019-01-04 08:44:43 -0800 (Fri, 04 Jan 2019)
Log Message
[iOS] Silently deny access to mail settings triggered by MessageUI framework
https://bugs.webkit.org/show_bug.cgi?id=193123
<rdar://problem/42485581>
Reviewed by Alexey Proskuryakov.
Remove unhelpful logging generated when we block access to non-WebKit preferences. These
invalid checks are done by an system framework that we cannot modify.
* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (239610 => 239611)
--- trunk/Source/WebKit/ChangeLog 2019-01-04 16:27:24 UTC (rev 239610)
+++ trunk/Source/WebKit/ChangeLog 2019-01-04 16:44:43 UTC (rev 239611)
@@ -1,5 +1,18 @@
2019-01-03 Brent Fulgham <[email protected]>
+ [iOS] Silently deny access to mail settings triggered by MessageUI framework
+ https://bugs.webkit.org/show_bug.cgi?id=193123
+ <rdar://problem/42485581>
+
+ Reviewed by Alexey Proskuryakov.
+
+ Remove unhelpful logging generated when we block access to non-WebKit preferences. These
+ invalid checks are done by an system framework that we cannot modify.
+
+ * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
+2019-01-03 Brent Fulgham <[email protected]>
+
[iOS] Update sandbox profile to use iconservices instead of lsdiconservice
https://bugs.webkit.org/show_bug.cgi?id=193115
<rdar://problem/44867379>
Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (239610 => 239611)
--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb 2019-01-04 16:27:24 UTC (rev 239610)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb 2019-01-04 16:44:43 UTC (rev 239611)
@@ -155,6 +155,12 @@
"com.apple.lookup.shared" ; Needed for DataDetector (Spotlight) support
)
+;; Silently deny unnecessary accesses caused by MessageUI framework.
+;; This can be removed once <rdar://problem/47038102> is resolved.
+(deny file-read*
+ (home-literal "/Library/Preferences/com.apple.mobilemail.plist")
+ (with no-log))
+
;; <rdar://problem/12985925> Need read access to /var/mobile/Library/Fonts to all apps
(allow file-read*
(home-subpath "/Library/Fonts"))
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
