Title: [272449] trunk/Source/WebKit
- Revision
- 272449
- Author
- [email protected]
- Date
- 2021-02-05 16:07:17 -0800 (Fri, 05 Feb 2021)
Log Message
REGRESSION (r271815): [macOS] /dev/dtracehelper is blocked on customer builds, even with SIP disabled
https://bugs.webkit.org/show_bug.cgi?id=221501
<rdar://73893768>
Reviewed by Per Arne Vollan.
Instead of requiring apple-internal to use /dev/dtracehelper, allow on systems where
SIP has been deactivated.
* WebProcess/com.apple.WebProcess.sb.in: Use CSR filter to gate access to /dev/dtracehelper
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (272448 => 272449)
--- trunk/Source/WebKit/ChangeLog 2021-02-05 23:32:39 UTC (rev 272448)
+++ trunk/Source/WebKit/ChangeLog 2021-02-06 00:07:17 UTC (rev 272449)
@@ -1,3 +1,16 @@
+2021-02-05 Brent Fulgham <[email protected]>
+
+ REGRESSION (r271815): [macOS] /dev/dtracehelper is blocked on customer builds, even with SIP disabled
+ https://bugs.webkit.org/show_bug.cgi?id=221501
+ <rdar://73893768>
+
+ Reviewed by Per Arne Vollan.
+
+ Instead of requiring apple-internal to use /dev/dtracehelper, allow on systems where
+ SIP has been deactivated.
+
+ * WebProcess/com.apple.WebProcess.sb.in: Use CSR filter to gate access to /dev/dtracehelper
+
2021-02-05 Eric Carlson <[email protected]>
[Mac] Connect MediaSession with MediaRemote and NowPlaying
Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (272448 => 272449)
--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2021-02-05 23:32:39 UTC (rev 272448)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2021-02-06 00:07:17 UTC (rev 272449)
@@ -85,11 +85,14 @@
(literal "/dev/null")
(literal "/dev/zero"))
-(with-filter (system-attribute apple-internal)
- (allow file-read*
- file-write-data
- file-ioctl
- (literal "/dev/dtracehelper"))
+(allow file-read*
+ file-write-data
+ file-ioctl
+ (require-all
+ (literal "/dev/dtracehelper")
+ (require-any
+ (csr CSR_ALLOW_APPLE_INTERNAL)
+ (csr CSR_ALLOW_UNRESTRICTED_DTRACE)))
)
;;; Allow creation of core dumps.
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
