Title: [255072] trunk/Source/WebKit
- Revision
- 255072
- Author
- [email protected]
- Date
- 2020-01-24 07:58:45 -0800 (Fri, 24 Jan 2020)
Log Message
[iOS] Add missing sysctl-read permission (already available in macOS sandbox)
https://bugs.webkit.org/show_bug.cgi?id=206713
<rdar://problem/57665153>
Reviewed by Per Arne Vollan.
Correct a sandbox violation encountered when attempting to log the system hostname.
This was already handled properly on macOS, but the rule was not added to the iOS sandbox.
* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (255071 => 255072)
--- trunk/Source/WebKit/ChangeLog 2020-01-24 15:26:24 UTC (rev 255071)
+++ trunk/Source/WebKit/ChangeLog 2020-01-24 15:58:45 UTC (rev 255072)
@@ -1,3 +1,16 @@
+2020-01-24 Brent Fulgham <[email protected]>
+
+ [iOS] Add missing sysctl-read permission (already available in macOS sandbox)
+ https://bugs.webkit.org/show_bug.cgi?id=206713
+ <rdar://problem/57665153>
+
+ Reviewed by Per Arne Vollan.
+
+ Correct a sandbox violation encountered when attempting to log the system hostname.
+ This was already handled properly on macOS, but the rule was not added to the iOS sandbox.
+
+ * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
2020-01-24 Adrian Perez de Castro <[email protected]>
Fix various non-unified build issues introduced since r254751
Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (255071 => 255072)
--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb 2020-01-24 15:26:24 UTC (rev 255071)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb 2020-01-24 15:58:45 UTC (rev 255072)
@@ -816,7 +816,9 @@
"kern.osvariant_status"
"kern.secure_kernel" ;; Needed by XPC bundle resolution
"kern.version"
- "vm.footprint_suspend"))
+ "vm.footprint_suspend")
+ (sysctl-name-regex #"^net.routetable") ;; <rdar://problem/57665153>
+)
(allow iokit-get-properties
(iokit-property-regex #"^AAPL,(DisplayPipe|OpenCLdisabled|IOGraphics_LER(|_RegTag_1|_RegTag_0|_Busy_2)|alias-policy|boot-display|display-alias|mux-switch-state|ndrv-dev|primary-display|slot-name)")
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes