Title: [251219] trunk/Source/WebKit
Revision
251219
Author
pvol...@apple.com
Date
2019-10-16 17:36:52 -0700 (Wed, 16 Oct 2019)

Log Message

[iOS] Remove ubiquity client rule from sandbox
https://bugs.webkit.org/show_bug.cgi?id=201347

Reviewed by Brent Fulgham.

This rule is most likely not needed, since we have already blocked all of its associated mach services,
and no issues have been reported.

* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (251218 => 251219)


--- trunk/Source/WebKit/ChangeLog	2019-10-17 00:15:28 UTC (rev 251218)
+++ trunk/Source/WebKit/ChangeLog	2019-10-17 00:36:52 UTC (rev 251219)
@@ -1,3 +1,15 @@
+2019-10-16  Per Arne Vollan  <pvol...@apple.com>
+
+        [iOS] Remove ubiquity client rule from sandbox
+        https://bugs.webkit.org/show_bug.cgi?id=201347
+
+        Reviewed by Brent Fulgham.
+
+        This rule is most likely not needed, since we have already blocked all of its associated mach services,
+        and no issues have been reported.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2019-10-16  Tim Horton  <timothy_hor...@apple.com>
 
         iOS: inputmode=none is not respected with a hardware keyboard attached

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (251218 => 251219)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2019-10-17 00:15:28 UTC (rev 251218)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2019-10-17 00:36:52 UTC (rev 251219)
@@ -40,9 +40,6 @@
     (global-name "com.apple.frontboard.systemappservices")                 ; -[UIViewServiceInterface _createProcessAssertion] -> SBSProcessIDForDisplayIdentifier()
     (global-name-regex #"^com\.apple\.uikit\.viewservice\..+"))
 
-;; Any app could use ubiquity.
-(ubiquity-client)
-
 ;; Any app can play audio & movies.
 (play-audio)
 (play-media)
@@ -405,8 +402,6 @@
 ;; established, see https://bugs.webkit.org/show_bug.cgi?id=193840
 (deny mach-lookup
     (global-name "com.apple.CoreAuthentication.daemon.libxpc")
-    (global-name "com.apple.FileCoordination")
-    (global-name "com.apple.FileProvider")
     (global-name "com.apple.Honeybee.event-notify")
     (global-name "com.apple.MediaPlayer.RemotePlayerService")
     (global-name "com.apple.ReportCrash.SimulateCrash")
@@ -415,8 +410,6 @@
     (global-name "com.apple.assertiond.processassertionconnection")
     (global-name "com.apple.audio.reporting.xpc")
     (global-name "com.apple.backboard.hid.services")
-    (global-name "com.apple.bird")
-    (global-name "com.apple.bird.token")
     (global-name "com.apple.cfprefsd.agent")
     (global-name "com.apple.containermanagerd")
     (global-name "com.apple.coremedia.assetcacheinspector")
@@ -434,7 +427,6 @@
     (global-name "com.apple.hangtracerd")
     (global-name "com.apple.itunescloudd.xpc")
     (global-name "com.apple.itunesstored.xpc")
-    (global-name "com.apple.librariand")
     (global-name "com.apple.locationd.spi")
     (global-name "com.apple.locationd.synchronous")
     (global-name "com.apple.lsd")
@@ -450,8 +442,6 @@
     (global-name "com.apple.pegasus")
     (global-name "com.apple.pluginkit.pkd")
     (global-name "com.apple.pluginkit.plugin-service")
-    (global-name "com.apple.quicklook.ThumbnailsAgent")
-    (global-name "com.apple.revisiond")
     (global-name "com.apple.springboard.backgroundappservices")
     (global-name "com.apple.system.libinfo.muser")
     (global-name "com.apple.webkit.camera")
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to