Title: [243888] trunk/Source/WebKit
- Revision
- 243888
- Author
- [email protected]
- Date
- 2019-04-04 12:13:38 -0700 (Thu, 04 Apr 2019)
Log Message
[macOS][iOS] Add filter to syscall sandbox rule
https://bugs.webkit.org/show_bug.cgi?id=196613
<rdar://problem/49531420>
Reviewed by Brent Fulgham.
This will restrict the existing sandbox rule for the syscall.
* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
* WebProcess/com.apple.WebProcess.sb.in:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (243887 => 243888)
--- trunk/Source/WebKit/ChangeLog 2019-04-04 19:07:53 UTC (rev 243887)
+++ trunk/Source/WebKit/ChangeLog 2019-04-04 19:13:38 UTC (rev 243888)
@@ -1,3 +1,16 @@
+2019-04-04 Per Arne Vollan <[email protected]>
+
+ [macOS][iOS] Add filter to syscall sandbox rule
+ https://bugs.webkit.org/show_bug.cgi?id=196613
+ <rdar://problem/49531420>
+
+ Reviewed by Brent Fulgham.
+
+ This will restrict the existing sandbox rule for the syscall.
+
+ * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+ * WebProcess/com.apple.WebProcess.sb.in:
+
2019-04-04 Youenn Fablet <[email protected]>
Service Worker Process does not have the right domain name
Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (243887 => 243888)
--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb 2019-04-04 19:07:53 UTC (rev 243887)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb 2019-04-04 19:13:38 UTC (rev 243888)
@@ -600,6 +600,8 @@
(syscall-number SYS_open_dprotected_np)
(syscall-number SYS_pread_nocancel)
(syscall-number SYS___semwait_signal_nocancel)
- (syscall-number SYS_kdebug_trace_string) ;; Needed for performance sampling, see <rdar://problem/48829655>.
)
+ (with-filter (system-attribute apple-internal)
+ (allow syscall-unix (syscall-number SYS_kdebug_trace_string)) ;; <rdar://problem/49531420>
+ )
)
Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (243887 => 243888)
--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2019-04-04 19:07:53 UTC (rev 243887)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2019-04-04 19:13:38 UTC (rev 243888)
@@ -963,8 +963,10 @@
(syscall-number SYS_kdebug_typefilter)
(syscall-number SYS_gettid) ;; Needed for base system, see <rdar://problem/48651255>
(syscall-number SYS_memorystatus_control) ;; Needed for memory measurement infrastructure, see <rdar://problem/48647263>
- (syscall-number SYS_kdebug_trace_string) ;; Needed for performance sampling, see <rdar://problem/48829655>.
(syscall-number SYS_psynch_rw_rdlock) ;; <rdar://problem/49060359>
)
+ (with-filter (system-attribute apple-internal)
+ (allow syscall-unix (syscall-number SYS_kdebug_trace_string)) ;; <rdar://problem/49531420>
+ )
)
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
