Title: [255823] branches/safari-609-branch/Source/WebKit

Diff

Modified: branches/safari-609-branch/Source/WebKit/ChangeLog (255822 => 255823)


--- branches/safari-609-branch/Source/WebKit/ChangeLog	2020-02-05 17:47:06 UTC (rev 255822)
+++ branches/safari-609-branch/Source/WebKit/ChangeLog	2020-02-05 17:48:08 UTC (rev 255823)
@@ -1,3 +1,11 @@
+2020-02-05  Brent Fulgham  <[email protected]>
+
+    Correct branch sandboxes. rdar://problem/59098315
+
+    * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+    * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+    * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2020-02-04  Russell Epstein  <[email protected]>
 
         Cherry-pick r255189. rdar://problem/58943054

Modified: branches/safari-609-branch/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (255822 => 255823)


--- branches/safari-609-branch/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2020-02-05 17:47:06 UTC (rev 255822)
+++ branches/safari-609-branch/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2020-02-05 17:48:08 UTC (rev 255823)
@@ -37,9 +37,12 @@
     (sysctl-name
         "hw.availcpu"
         "hw.ncpu"
-        "hw.model"
+        "hw.model" ;; Needed for bundle loading
         "kern.memorystatus_level"
-        "vm.footprint_suspend"))
+        "kern.osproductversion" ;; Needed by CFNetwork (HSTS store and others)
+        "kern.tcsm_available" ;; Needed for IndexedDB support.
+        "vm.footprint_suspend")
+)
 
 (deny iokit-get-properties)
 

Modified: branches/safari-609-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb (255822 => 255823)


--- branches/safari-609-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb	2020-02-05 17:47:06 UTC (rev 255822)
+++ branches/safari-609-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb	2020-02-05 17:48:08 UTC (rev 255823)
@@ -555,7 +555,8 @@
 (deny sysctl*)
 (allow sysctl-read
     (sysctl-name
-        "hw.availcpu" ;; Needed by JSC engine.
+        "hw.activecpu" ;; Needed by JSC engine.
+        "hw.availcpu"
         "hw.ncpu"
         "hw.machine" ;; Needed by CFNetwork (CFURLProtocols)
         "hw.model" ;; Needed for bundle loading

Modified: branches/safari-609-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (255822 => 255823)


--- branches/safari-609-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2020-02-05 17:47:06 UTC (rev 255822)
+++ branches/safari-609-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2020-02-05 17:48:08 UTC (rev 255823)
@@ -121,7 +121,7 @@
         (mobile-preferences-read "com.apple.MobileAsset")))
 
 (define-once (mobile-keybag-access)
-     (allow iokit-open (with report) (with telemetry)
+     (allow iokit-open (with telemetry)
             (iokit-user-client-class "AppleKeyStoreUserClient")))
 
 (define-once (location-services)
@@ -846,7 +846,7 @@
 (deny sysctl*)
 (allow sysctl-read
     (sysctl-name
-        "hw.activecpu"
+        "hw.activecpu" ;; Needed by JSC engine.
         "hw.availcpu"
         "hw.cachelinesize"
         "hw.cputype"
@@ -866,7 +866,7 @@
         "kern.osproductversion"
         "kern.osrelease"
         "kern.osvariant_status"
-        "kern.secure_kernel"
+        "kern.secure_kernel" ;; Needed by XPC bundle resolution
         "kern.version"
         "vm.footprint_suspend"))
 
@@ -882,6 +882,7 @@
     (iokit-property "IOClassNameOverride")
     (iokit-property "IOPlatformUUID")
     (iokit-property "IOSurfaceAcceleratorCapabilitiesDict")
+    (iokit-property "LGHSupported")
     (iokit-property "Protocol Characteristics")
     (iokit-property "als-colorCfg") ;; <rdar://problem/52903475>
     (iokit-property "artwork-device-idiom") ;; <rdar://problem/49497720>
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to