Title: [245817] trunk/Source/WebKit
- Revision
- 245817
- Author
- [email protected]
- Date
- 2019-05-28 10:33:58 -0700 (Tue, 28 May 2019)
Log Message
Update sandbox rules for more News use cases
https://bugs.webkit.org/show_bug.cgi?id=198236
<rdar://problem/50054027>
Reviewed by Alexey Proskuryakov.
Update the WebContent and Network process sandboxes so that News has the same set of allowed
service access as regular WebKit views.
* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
* WebProcess/com.apple.WebProcess.sb.in:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (245816 => 245817)
--- trunk/Source/WebKit/ChangeLog 2019-05-28 17:29:33 UTC (rev 245816)
+++ trunk/Source/WebKit/ChangeLog 2019-05-28 17:33:58 UTC (rev 245817)
@@ -1,3 +1,17 @@
+2019-05-28 Brent Fulgham <[email protected]>
+
+ Update sandbox rules for more News use cases
+ https://bugs.webkit.org/show_bug.cgi?id=198236
+ <rdar://problem/50054027>
+
+ Reviewed by Alexey Proskuryakov.
+
+ Update the WebContent and Network process sandboxes so that News has the same set of allowed
+ service access as regular WebKit views.
+
+ * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+ * WebProcess/com.apple.WebProcess.sb.in:
+
2019-05-27 Carlos Garcia Campos <[email protected]>
[GTK] Use WPEBackend-fdo for accelerating compositing in Wayland instead of the nested compositor
Modified: trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (245816 => 245817)
--- trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in 2019-05-28 17:29:33 UTC (rev 245816)
+++ trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in 2019-05-28 17:33:58 UTC (rev 245817)
@@ -1,4 +1,4 @@
-; Copyright (C) 2013-2017 Apple Inc. All rights reserved.
+; Copyright (C) 2013-2019 Apple Inc. All rights reserved.
;
; Redistribution and use in source and binary forms, with or without
; modification, are permitted provided that the following conditions
@@ -43,7 +43,7 @@
(deny iokit-get-properties)
-#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101300
+#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101300 || PLATFORM(IOSMAC)
(deny mach-lookup (xpc-service-name-prefix ""))
#endif
@@ -57,7 +57,7 @@
(define (home-literal home-relative-literal)
(literal (string-append (param "HOME_DIR") home-relative-literal)))
-#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101300
+#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101300 || PLATFORM(IOSMAC)
;; CFNetwork
(allow file-read-data (path "/private/var/db/nsurlstoraged/dafsaData.bin"))
#endif
@@ -152,7 +152,7 @@
(global-name "com.apple.FileCoordination")
(global-name "com.apple.PowerManagement.control")
(global-name "com.apple.SystemConfiguration.configd")
-#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101300
+#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101300 || PLATFORM(IOSMAC)
(global-name "com.apple.analyticsd")
#endif
(global-name "com.apple.cookied")
Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (245816 => 245817)
--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2019-05-28 17:29:33 UTC (rev 245816)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2019-05-28 17:33:58 UTC (rev 245817)
@@ -1,4 +1,4 @@
-; Copyright (C) 2010-2018 Apple Inc. All rights reserved.
+; Copyright (C) 2010-2019 Apple Inc. All rights reserved.
;
; Redistribution and use in source and binary forms, with or without
; modification, are permitted provided that the following conditions
@@ -114,7 +114,7 @@
;; CVMS
(allow mach-lookup
(global-name "com.apple.cvmsServ"))
-#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101400
+#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101400 || PLATFORM(IOSMAC)
(allow file-read*
(prefix "/private/var/db/CVMS/cvmsCodeSignObj"))
#endif
@@ -636,7 +636,7 @@
(global-name "com.apple.tccd")
(global-name "com.apple.tccd.system")
(global-name "com.apple.trustd.agent")
-#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101400
+#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101400 || PLATFORM(IOSMAC)
(global-name "com.apple.CARenderServer") ; Needed for [CAContext remoteContextWithOptions]
#else
(global-name "com.apple.windowserver.active")
@@ -648,7 +648,7 @@
(allow mach-lookup (xpc-service-name "com.apple.MTLCompilerService"))
#endif
-#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101400
+#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101400 || PLATFORM(IOSMAC)
(deny mach-lookup (with no-log)
(global-name "com.apple.ViewBridgeAuxiliary")
(global-name "com.apple.windowserver.active"))
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
