Title: [257935] trunk/Source/WebKit
Revision
257935
Author
[email protected]
Date
2020-03-05 11:12:16 -0800 (Thu, 05 Mar 2020)

Log Message

Sandbox: Allow sysctl read of "kern.ostype"
https://bugs.webkit.org/show_bug.cgi?id=208650
<rdar://problem/60010603>

Reviewed by Alexey Proskuryakov.

NSURLSession needs access to "kern.ostype", so the Networking and WebContent
sandboxes should allow it. I corrected this for the iOS Network sandbox in
Bug 208346. I should have handled macOS and the WebContent process (on both
platforms) at the same time.

* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
* WebProcess/com.apple.WebProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (257934 => 257935)


--- trunk/Source/WebKit/ChangeLog	2020-03-05 19:08:03 UTC (rev 257934)
+++ trunk/Source/WebKit/ChangeLog	2020-03-05 19:12:16 UTC (rev 257935)
@@ -1,3 +1,20 @@
+2020-03-05  Brent Fulgham  <[email protected]>
+
+        Sandbox: Allow sysctl read of "kern.ostype"
+        https://bugs.webkit.org/show_bug.cgi?id=208650
+        <rdar://problem/60010603>
+
+        Reviewed by Alexey Proskuryakov.
+
+        NSURLSession needs access to "kern.ostype", so the Networking and WebContent
+        sandboxes should allow it. I corrected this for the iOS Network sandbox in
+        Bug 208346. I should have handled macOS and the WebContent process (on both
+        platforms) at the same time.
+
+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2020-03-05  Sihui Liu  <[email protected]>
 
         Assertion failed: shouldBeActive() in BackgroundProcessResponsivenessTimer::responsivenessCheckTimerFired()

Modified: trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (257934 => 257935)


--- trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2020-03-05 19:08:03 UTC (rev 257934)
+++ trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2020-03-05 19:12:16 UTC (rev 257935)
@@ -181,6 +181,7 @@
         "kern.osproductversion" ;; Needed by CFNetwork (HSTS store and others)
         "kern.osversion" ;; Needed by WebKit and ASL logging.
         "kern.tcsm_available" ;; Needed for IndexedDB support.
+        "kern.ostype"
         "vm.footprint_suspend")
     (sysctl-name-regex #"^net.routetable")
 )

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (257934 => 257935)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2020-03-05 19:08:03 UTC (rev 257934)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2020-03-05 19:12:16 UTC (rev 257935)
@@ -738,6 +738,7 @@
         "kern.memorystatus_level"
         "kern.osproductversion"
         "kern.osrelease"
+        "kern.ostype"
         "kern.osvariant_status"
         "kern.secure_kernel" ;; Needed by XPC bundle resolution
         "kern.version"

Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (257934 => 257935)


--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2020-03-05 19:08:03 UTC (rev 257934)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2020-03-05 19:12:16 UTC (rev 257935)
@@ -1,4 +1,4 @@
-; Copyright (C) 2010-2019 Apple Inc. All rights reserved.
+; Copyright (C) 2010-2020 Apple Inc. All rights reserved.
 ;
 ; Redistribution and use in source and binary forms, with or without
 ; modification, are permitted provided that the following conditions
@@ -176,6 +176,7 @@
         "kern.maxfilesperproc"
         "kern.memorystatus_level"
         "kern.osproductversion" ;; <rdar://problem/51756739>
+        "kern.ostype"
         "kern.safeboot"
         "kern.version"
         "machdep.cpu.brand_string"
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to