Title: [269163] trunk/Source/WebKit
- Revision
- 269163
- Author
- [email protected]
- Date
- 2020-10-29 13:23:45 -0700 (Thu, 29 Oct 2020)
Log Message
[macOS] Add required entitlement for message filtering
https://bugs.webkit.org/show_bug.cgi?id=218342
<rdar://problem/70810567>
Reviewed by Brent Fulgham.
The entitlement 'com.apple.private.security.message-filter' needs to be set to YES. This patch also
adds telemetry for mach-bootstrap filtering.
* Scripts/process-entitlements.sh:
* WebProcess/com.apple.WebProcess.sb.in:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (269162 => 269163)
--- trunk/Source/WebKit/ChangeLog 2020-10-29 20:20:28 UTC (rev 269162)
+++ trunk/Source/WebKit/ChangeLog 2020-10-29 20:23:45 UTC (rev 269163)
@@ -1,3 +1,17 @@
+2020-10-29 Per Arne Vollan <[email protected]>
+
+ [macOS] Add required entitlement for message filtering
+ https://bugs.webkit.org/show_bug.cgi?id=218342
+ <rdar://problem/70810567>
+
+ Reviewed by Brent Fulgham.
+
+ The entitlement 'com.apple.private.security.message-filter' needs to be set to YES. This patch also
+ adds telemetry for mach-bootstrap filtering.
+
+ * Scripts/process-entitlements.sh:
+ * WebProcess/com.apple.WebProcess.sb.in:
+
2020-10-29 Alex Christensen <[email protected]>
Don't look in the keychain for a preferred client certificate in the network process
Modified: trunk/Source/WebKit/Scripts/process-entitlements.sh (269162 => 269163)
--- trunk/Source/WebKit/Scripts/process-entitlements.sh 2020-10-29 20:20:28 UTC (rev 269162)
+++ trunk/Source/WebKit/Scripts/process-entitlements.sh 2020-10-29 20:23:45 UTC (rev 269163)
@@ -22,6 +22,7 @@
plistbuddy Add :com.apple.developer.videotoolbox.client-sandboxed-decoder bool YES
plistbuddy Add :com.apple.pac.shared_region_id string WebContent
plistbuddy Add :com.apple.private.pac.exception bool YES
+ plistbuddy Add :com.apple.private.security.message-filter bool YES
fi
fi
Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (269162 => 269163)
--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2020-10-29 20:20:28 UTC (rev 269162)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2020-10-29 20:23:45 UTC (rev 269163)
@@ -1227,6 +1227,15 @@
#include <WebKitAdditions/WebContentSandboxAdditionsMac.sb>
#endif
+(when (defined? 'mach-bootstrap)
+ (allow mach-bootstrap
+ (apply-message-filter
+ (allow xpc-message-send (with telemetry))
+ (allow xpc-message-send (with telemetry) (message-number 206))
+ )
+ )
+)
+
(when (defined? 'mach-kernel-endpoint)
(allow mach-kernel-endpoint
(apply-message-filter
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
