Title: [254436] trunk/Source/WebKit
Revision
254436
Author
[email protected]
Date
2020-01-13 09:39:32 -0800 (Mon, 13 Jan 2020)

Log Message

[iOS] Remove 'com.apple.diagnosticd' from WebContent process sandbox
https://bugs.webkit.org/show_bug.cgi?id=206114
<rdar://problem/58496791>

Reviewed by Per Arne Vollan.

In Bug 205292 we began dynamically adding a sandbox extension for 'com.apple.diagnosticd' when needed.
We should remove the blanket permission from the sandbox.

Test: fast/sandbox/ios/sandbox-mach-lookup.html

* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (254435 => 254436)


--- trunk/Source/WebKit/ChangeLog	2020-01-13 17:35:57 UTC (rev 254435)
+++ trunk/Source/WebKit/ChangeLog	2020-01-13 17:39:32 UTC (rev 254436)
@@ -1,3 +1,18 @@
+2020-01-13  Brent Fulgham  <[email protected]>
+
+        [iOS] Remove 'com.apple.diagnosticd' from WebContent process sandbox
+        https://bugs.webkit.org/show_bug.cgi?id=206114
+        <rdar://problem/58496791>
+
+        Reviewed by Per Arne Vollan.
+
+        In Bug 205292 we began dynamically adding a sandbox extension for 'com.apple.diagnosticd' when needed.
+        We should remove the blanket permission from the sandbox.
+
+        Test: fast/sandbox/ios/sandbox-mach-lookup.html
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2020-01-12  Wenson Hsieh  <[email protected]>
 
         [macCatalyst] UI process crashes on launch after r254101

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (254435 => 254436)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2020-01-13 17:35:57 UTC (rev 254435)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2020-01-13 17:39:32 UTC (rev 254436)
@@ -668,9 +668,6 @@
 (allow ipc-posix-shm-read*
        (ipc-posix-name "apple.shm.notification_center"))
 
-(allow mach-lookup (with report) (with telemetry)
-    (global-name "com.apple.diagnosticd"))
-
 (logd-diagnostic-client)
 
 (managed-configuration-read-public)
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to