Title: [243267] trunk/Source/WebKit
- Revision
- 243267
- Author
- [email protected]
- Date
- 2019-03-20 17:36:06 -0700 (Wed, 20 Mar 2019)
Log Message
Extend Networking Process sandbox for some system frameworks
https://bugs.webkit.org/show_bug.cgi?id=196036
<rdar://problem/47594150>
Reviewed by Brent Fulgham.
* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
* Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (243266 => 243267)
--- trunk/Source/WebKit/ChangeLog 2019-03-21 00:35:50 UTC (rev 243266)
+++ trunk/Source/WebKit/ChangeLog 2019-03-21 00:36:06 UTC (rev 243267)
@@ -1,3 +1,14 @@
+2019-03-20 Jiewen Tan <[email protected]>
+
+ Extend Networking Process sandbox for some system frameworks
+ https://bugs.webkit.org/show_bug.cgi?id=196036
+ <rdar://problem/47594150>
+
+ Reviewed by Brent Fulgham.
+
+ * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+ * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+
2019-03-20 Alex Christensen <[email protected]>
Reduce use of LegacySync IPC message type
Modified: trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (243266 => 243267)
--- trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in 2019-03-21 00:35:50 UTC (rev 243266)
+++ trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in 2019-03-21 00:36:06 UTC (rev 243267)
@@ -142,7 +142,9 @@
(allow ipc-posix-shm-read-data
(ipc-posix-name "FNetwork.defaultStorageSession")
(ipc-posix-name-regex #"\.PrivateBrowsing-")
- (ipc-posix-name-regex #"^WebKit Test-"))
+ (ipc-posix-name-regex #"^WebKit Test-")
+ (ipc-posix-name "/com.apple.AppSSO.version")
+)
;; Various services required by CFNetwork and other frameworks
(allow mach-lookup
@@ -159,6 +161,7 @@
(global-name "com.apple.lsd.mapdb")
(global-name "com.apple.nesessionmanager.flow-divert-token")
(global-name "com.apple.nesessionmanager.content-filter") ;; <rdar://problem/47598758>
+ (global-name "com.apple.AppSSO.service-xpc")
)
;; Security framework
Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb (243266 => 243267)
--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb 2019-03-21 00:35:50 UTC (rev 243266)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb 2019-03-21 00:36:06 UTC (rev 243267)
@@ -95,7 +95,8 @@
;; Various services required by system frameworks
(allow mach-lookup
(global-name "com.apple.lsd.mapdb")
- (global-name "com.apple.analyticsd"))
+ (global-name "com.apple.analyticsd")
+ (global-name "com.apple.AppSSO.service-xpc"))
;; For reporting progress for active downloads <rdar://problem/44405661>
(allow mach-lookup
@@ -104,3 +105,7 @@
;; <rdar://problem/47598758>
(allow mach-lookup
(global-name "com.apple.nesessionmanager.content-filter"))
+
+;; Various shared memory accesses required by system frameworks
+(allow ipc-posix-shm-read-data
+ (ipc-posix-name "/com.apple.AppSSO.version"))
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
