Title: [274311] trunk/Source/WebKit
Revision
274311
Author
[email protected]
Date
2021-03-11 16:43:27 -0800 (Thu, 11 Mar 2021)

Log Message

[iOS, macOS] Re-allow WebContent sandbox permissions for specific /etc files
https://bugs.webkit.org/show_bug.cgi?id=223088
<rdar://problem/75332107>

Reviewed by Per Arne Vollan.

* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
* WebProcess/com.apple.WebProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (274310 => 274311)


--- trunk/Source/WebKit/ChangeLog	2021-03-12 00:22:08 UTC (rev 274310)
+++ trunk/Source/WebKit/ChangeLog	2021-03-12 00:43:27 UTC (rev 274311)
@@ -1,3 +1,14 @@
+2021-03-11  Brent Fulgham  <[email protected]>
+
+        [iOS, macOS] Re-allow WebContent sandbox permissions for specific /etc files 
+        https://bugs.webkit.org/show_bug.cgi?id=223088
+        <rdar://problem/75332107>
+
+        Reviewed by Per Arne Vollan.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2021-03-11  Devin Rousso  <[email protected]>
 
         [macOS] override the background color of PDF documents to match PDFKit

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (274310 => 274311)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2021-03-12 00:22:08 UTC (rev 274310)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2021-03-12 00:43:27 UTC (rev 274311)
@@ -362,6 +362,7 @@
   (literal "/private/etc/fstab"
            "/private/etc/hosts"
            "/private/etc/group"
+           "/private/etc/passwd"
            "/private/etc/protocols"
            "/private/etc/services"))
 
@@ -581,9 +582,6 @@
     required-etc-files
     (literal "/"))
 
-(deny file-read* (with no-report)
-      (literal "/private/etc/passwd"))
-
 (allow file-read*
        (subpath "/private/var/MobileAsset/PreinstalledAssetsV2/InstallWithOs"))
 

Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (274310 => 274311)


--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2021-03-12 00:22:08 UTC (rev 274310)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2021-03-12 00:43:27 UTC (rev 274311)
@@ -80,10 +80,8 @@
     (literal "/dev/autofs_nowait")
     (literal "/dev/random")
     (literal "/dev/urandom")
-#if __MAC_OS_X_VERSION_MIN_REQUIRED < 120000
     (literal "/private/etc/master.passwd")
     (literal "/private/etc/passwd")
-#endif
 )
 
 (allow file-read*
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to