Title: [270356] trunk/Source/WebKit
Revision
270356
Author
[email protected]
Date
2020-12-02 11:10:48 -0800 (Wed, 02 Dec 2020)

Log Message

[iOS] Silence sandbox warning for unneeded sysctl-read of "hw.tbfrequency_compat"
https://bugs.webkit.org/show_bug.cgi?id=219414
<rdar://problem/71740719>

Reviewed by Per Arne Vollan.

Silence a spurious log generated when our sandbox denies access to the unused sysctl
"hw.tbfrequency_compat". I have confirmed with the framework that attempts to read this
value, and they confirm they don't need the value, and actually are not using the result
anywhere in their framework.

Let's silence this report.

* Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb:
* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (270355 => 270356)


--- trunk/Source/WebKit/ChangeLog	2020-12-02 19:07:32 UTC (rev 270355)
+++ trunk/Source/WebKit/ChangeLog	2020-12-02 19:10:48 UTC (rev 270356)
@@ -1,3 +1,21 @@
+2020-12-02  Brent Fulgham  <[email protected]>
+
+        [iOS] Silence sandbox warning for unneeded sysctl-read of "hw.tbfrequency_compat"
+        https://bugs.webkit.org/show_bug.cgi?id=219414
+        <rdar://problem/71740719>
+
+        Reviewed by Per Arne Vollan.
+
+        Silence a spurious log generated when our sandbox denies access to the unused sysctl
+        "hw.tbfrequency_compat". I have confirmed with the framework that attempts to read this
+        value, and they confirm they don't need the value, and actually are not using the result
+        anywhere in their framework.
+
+        Let's silence this report.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2020-12-02  Wenson Hsieh  <[email protected]>
 
         Entire image elements are sometimes selected after ending a image extraction interaction

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb (270355 => 270356)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb	2020-12-02 19:07:32 UTC (rev 270355)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb	2020-12-02 19:10:48 UTC (rev 270356)
@@ -600,7 +600,9 @@
        (require-entitlement "com.apple.private.kernel.override-cpumon"))
 
 (deny sysctl-read (with no-report)
-      (sysctl-name "sysctl.proc_native"))
+      (sysctl-name
+          "hw.tbfrequency_compat" ;; <rdar://71740719>
+          "sysctl.proc_native"))
 
 (with-filter (system-attribute apple-internal)
     (allow sysctl-read sysctl-write

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (270355 => 270356)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2020-12-02 19:07:32 UTC (rev 270355)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2020-12-02 19:10:48 UTC (rev 270356)
@@ -628,6 +628,7 @@
 (deny sysctl-read (with no-report)
       (sysctl-name
           "hw.cpufrequency_compat"
+          "hw.tbfrequency_compat" ;; <rdar://71740719>
           "sysctl.proc_native"))
 
 (with-filter (system-attribute apple-internal)
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to