Title: [265604] trunk/Source/WebKit
Revision
265604
Author
[email protected]
Date
2020-08-13 06:23:13 -0700 (Thu, 13 Aug 2020)

Log Message

Unreviewed, reverting r265520.

Invalid sandbox change

Reverted changeset:

"[macOS] Deny access to directory for compiled WebKit
sandboxes"
https://bugs.webkit.org/show_bug.cgi?id=215384
https://trac.webkit.org/changeset/265520

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (265603 => 265604)


--- trunk/Source/WebKit/ChangeLog	2020-08-13 08:13:05 UTC (rev 265603)
+++ trunk/Source/WebKit/ChangeLog	2020-08-13 13:23:13 UTC (rev 265604)
@@ -1,3 +1,16 @@
+2020-08-13  Per Arne Vollan  <[email protected]>
+
+        Unreviewed, reverting r265520.
+
+        Invalid sandbox change
+
+        Reverted changeset:
+
+        "[macOS] Deny access to directory for compiled WebKit
+        sandboxes"
+        https://bugs.webkit.org/show_bug.cgi?id=215384
+        https://trac.webkit.org/changeset/265520
+
 2020-08-12  Keith Rollin  <[email protected]>
 
         Remove the need for defining USE_NEW_BUILD_SYSTEM

Modified: trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in (265603 => 265604)


--- trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in	2020-08-13 08:13:05 UTC (rev 265603)
+++ trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in	2020-08-13 13:23:13 UTC (rev 265604)
@@ -551,12 +551,6 @@
 
 (if (positive? (string-length (param "DARWIN_USER_CACHE_DIR")))
     (allow-read-write-directory-and-issue-read-write-extensions (param "DARWIN_USER_CACHE_DIR")))
-    (deny file-read* file-write*
-        (subpath (string-append (param "DARWIN_USER_CACHE_DIR") "/com.apple.WebKit.WebContent.Sandbox")))
-    (deny file-read* file-write*
-        (subpath (string-append (param "DARWIN_USER_CACHE_DIR") "/com.apple.WebKit.Networking.Sandbox")))
-    (deny file-read* file-write*
-        (subpath (string-append (param "DARWIN_USER_CACHE_DIR") "/com.apple.WebKit.GPU.Sandbox")))
 
 (if (positive? (string-length (param "DARWIN_USER_TEMP_DIR")))
     (allow-read-write-directory-and-issue-read-write-extensions (param "DARWIN_USER_TEMP_DIR")))

Modified: trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (265603 => 265604)


--- trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2020-08-13 08:13:05 UTC (rev 265603)
+++ trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2020-08-13 13:23:13 UTC (rev 265604)
@@ -276,13 +276,6 @@
 
 (allow file-read* file-write* (subpath (param "DARWIN_USER_CACHE_DIR")))
 
-(deny file-read* file-write*
-    (subpath (string-append (param "DARWIN_USER_CACHE_DIR") "/com.apple.WebKit.WebContent.Sandbox")))
-(deny file-read* file-write*
-    (subpath (string-append (param "DARWIN_USER_CACHE_DIR") "/com.apple.WebKit.Networking.Sandbox")))
-(deny file-read* file-write*
-    (subpath (string-append (param "DARWIN_USER_CACHE_DIR") "/com.apple.WebKit.GPU.Sandbox")))
-
 (allow file-read* file-write* (subpath (param "DARWIN_USER_TEMP_DIR")))
 
 ;; IOKit user clients

Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (265603 => 265604)


--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2020-08-13 08:13:05 UTC (rev 265603)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2020-08-13 13:23:13 UTC (rev 265604)
@@ -633,12 +633,6 @@
 
 (if (positive? (string-length (param "DARWIN_USER_CACHE_DIR")))
     (allow-read-write-directory-and-issue-read-write-extensions (param "DARWIN_USER_CACHE_DIR")))
-    (deny file-read* file-write*
-        (subpath (string-append (param "DARWIN_USER_CACHE_DIR") "/com.apple.WebKit.WebContent.Sandbox")))
-    (deny file-read* file-write*
-        (subpath (string-append (param "DARWIN_USER_CACHE_DIR") "/com.apple.WebKit.Networking.Sandbox")))
-    (deny file-read* file-write*
-        (subpath (string-append (param "DARWIN_USER_CACHE_DIR") "/com.apple.WebKit.GPU.Sandbox")))
 
 (if (positive? (string-length (param "DARWIN_USER_TEMP_DIR")))
     (allow-read-write-directory-and-issue-read-write-extensions (param "DARWIN_USER_TEMP_DIR")))
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to