Title: [271961] trunk/Source/WebKit
- Revision
- 271961
- Author
- [email protected]
- Date
- 2021-01-27 10:04:26 -0800 (Wed, 27 Jan 2021)
Log Message
[macOS] Remove shm-write access to com.apple.AppleDatabaseChanged
https://bugs.webkit.org/show_bug.cgi?id=221041
<rdar://problem/70501252>
Reviewed by Brent Fulgham.
Remove shm-write access to com.apple.AppleDatabaseChanged in the WebContent process on maOS, since there are no reports
of this being used.
* WebProcess/com.apple.WebProcess.sb.in:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (271960 => 271961)
--- trunk/Source/WebKit/ChangeLog 2021-01-27 18:04:01 UTC (rev 271960)
+++ trunk/Source/WebKit/ChangeLog 2021-01-27 18:04:26 UTC (rev 271961)
@@ -1,5 +1,18 @@
2021-01-27 Per Arne <[email protected]>
+ [macOS] Remove shm-write access to com.apple.AppleDatabaseChanged
+ https://bugs.webkit.org/show_bug.cgi?id=221041
+ <rdar://problem/70501252>
+
+ Reviewed by Brent Fulgham.
+
+ Remove shm-write access to com.apple.AppleDatabaseChanged in the WebContent process on maOS, since there are no reports
+ of this being used.
+
+ * WebProcess/com.apple.WebProcess.sb.in:
+
+2021-01-27 Per Arne <[email protected]>
+
[macOS] Enforce IOKit message filtering
https://bugs.webkit.org/show_bug.cgi?id=221038
<rdar://problem/71333134>
Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (271960 => 271961)
--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2021-01-27 18:04:01 UTC (rev 271960)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2021-01-27 18:04:26 UTC (rev 271961)
@@ -1211,12 +1211,6 @@
(subpath "/private/var/db/mds")
(literal "/private/var/db/DetachedSignatures"))
-(allow ipc-posix-shm-read* ipc-posix-shm-write-data ipc-posix-shm-write-create
-#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 110000
- (with report) (with telemetry-backtrace)
-#endif
- (ipc-posix-name "com.apple.AppleDatabaseChanged"))
-
;; CoreFoundation. We don't import com.apple.corefoundation.sb, because it allows unnecessary access to pasteboard.
#if !HAVE(CSCHECKFIXDISABLE)
(allow mach-lookup
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
