Title: [272586] trunk/Source/WebKit
- Revision
- 272586
- Author
- [email protected]
- Date
- 2021-02-09 10:03:53 -0800 (Tue, 09 Feb 2021)
Log Message
[macOS] Deny mach-lookup to the fonts service
https://bugs.webkit.org/show_bug.cgi?id=221610
<rdar://problem/69168609>
Reviewed by Brent Fulgham.
By setting the Info.plist key CTIgnoreUserFonts to true, mach-lookup to the fonts service in the WebContent process can
be denied on macOS.
No new tests, covered by existing tests.
* WebProcess/EntryPoint/Cocoa/XPCService/WebContentService/Info-OSX.plist:
* WebProcess/com.apple.WebProcess.sb.in:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (272585 => 272586)
--- trunk/Source/WebKit/ChangeLog 2021-02-09 18:03:28 UTC (rev 272585)
+++ trunk/Source/WebKit/ChangeLog 2021-02-09 18:03:53 UTC (rev 272586)
@@ -1,5 +1,21 @@
2021-02-09 Per Arne <[email protected]>
+ [macOS] Deny mach-lookup to the fonts service
+ https://bugs.webkit.org/show_bug.cgi?id=221610
+ <rdar://problem/69168609>
+
+ Reviewed by Brent Fulgham.
+
+ By setting the Info.plist key CTIgnoreUserFonts to true, mach-lookup to the fonts service in the WebContent process can
+ be denied on macOS.
+
+ No new tests, covered by existing tests.
+
+ * WebProcess/EntryPoint/Cocoa/XPCService/WebContentService/Info-OSX.plist:
+ * WebProcess/com.apple.WebProcess.sb.in:
+
+2021-02-09 Per Arne <[email protected]>
+
[macOS] Deny mach-lookup to the service 'com.apple.trustd.agent'
https://bugs.webkit.org/show_bug.cgi?id=221611
<rdar://problem/68935818>
Modified: trunk/Source/WebKit/WebProcess/EntryPoint/Cocoa/XPCService/WebContentService/Info-OSX.plist (272585 => 272586)
--- trunk/Source/WebKit/WebProcess/EntryPoint/Cocoa/XPCService/WebContentService/Info-OSX.plist 2021-02-09 18:03:28 UTC (rev 272585)
+++ trunk/Source/WebKit/WebProcess/EntryPoint/Cocoa/XPCService/WebContentService/Info-OSX.plist 2021-02-09 18:03:53 UTC (rev 272586)
@@ -55,5 +55,7 @@
</dict>
<key>NSColorPreferLocalNotifications</key>
<integer>1</integer>
+ <key>CTIgnoreUserFonts</key>
+ <true/>
</dict>
</plist>
Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (272585 => 272586)
--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2021-02-09 18:03:28 UTC (rev 272585)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2021-02-09 18:03:53 UTC (rev 272586)
@@ -1108,15 +1108,19 @@
#endif
)
+#if __MAC_OS_X_VERSION_MIN_REQUIRED <= 110000
(allow mach-lookup
-#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 110000
- (with report) (with telemetry-backtrace)
-#endif
-#if __MAC_OS_X_VERSION_MIN_REQUIRED <= 110000
(global-name "com.apple.PowerManagement.control")
(global-name "com.apple.SystemConfiguration.configd")
(global-name "com.apple.assertiond.processassertionconnection")
+)
#endif
+
+#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 120000
+(deny mach-lookup (with telemetry-backtrace)
+#else
+(allow mach-lookup
+#endif
(global-name "com.apple.fonts")
)
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
