Title: [275242] trunk/Source/WebKit
- Revision
- 275242
- Author
- [email protected]
- Date
- 2021-03-30 15:25:29 -0700 (Tue, 30 Mar 2021)
Log Message
[macOS] Reduce logging for uninteresting sandbox violations
https://bugs.webkit.org/show_bug.cgi?id=223943
<rdar://problem/76014115>
Reviewed by Per Arne Vollan.
Testing has shown some IOKit properties needed by the macOS Network Process, and a handful of items needed when running in recovery mode. We should
allow these items to support proper function and to reduce telemetry for items that we don't need to learn more about.
* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
* WebProcess/com.apple.WebProcess.sb.in:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (275241 => 275242)
--- trunk/Source/WebKit/ChangeLog 2021-03-30 22:01:48 UTC (rev 275241)
+++ trunk/Source/WebKit/ChangeLog 2021-03-30 22:25:29 UTC (rev 275242)
@@ -1,3 +1,17 @@
+2021-03-30 Brent Fulgham <[email protected]>
+
+ [macOS] Reduce logging for uninteresting sandbox violations
+ https://bugs.webkit.org/show_bug.cgi?id=223943
+ <rdar://problem/76014115>
+
+ Reviewed by Per Arne Vollan.
+
+ Testing has shown some IOKit properties needed by the macOS Network Process, and a handful of items needed when running in recovery mode. We should
+ allow these items to support proper function and to reduce telemetry for items that we don't need to learn more about.
+
+ * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+ * WebProcess/com.apple.WebProcess.sb.in:
+
2021-03-30 Myles C. Maxfield <[email protected]>
Address post-commit comments on r275180
Modified: trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (275241 => 275242)
--- trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in 2021-03-30 22:01:48 UTC (rev 275241)
+++ trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in 2021-03-30 22:25:29 UTC (rev 275242)
@@ -1,4 +1,4 @@
-; Copyright (C) 2013-2020 Apple Inc. All rights reserved.
+; Copyright (C) 2013-2021 Apple Inc. All rights reserved.
;
; Redistribution and use in source and binary forms, with or without
; modification, are permitted provided that the following conditions
@@ -189,6 +189,16 @@
)
(deny iokit-get-properties)
+(allow iokit-get-properties
+ (iokit-property
+ "Ejectable"
+ "IOClassNameOverride"
+ "IOMediaIcon"
+ "Product Identification"
+ "Protocol Characteristics"
+ "Removable"
+ )
+)
(deny mach-lookup (xpc-service-name-prefix ""))
@@ -311,6 +321,12 @@
(global-name "com.apple.AppSSO.service-xpc")
)
+(with-filter (uid 0)
+ (allow mach-lookup
+ (global-name "com.apple.DiskArbitration.diskarbitrationd")
+ )
+)
+
;; Security framework
(allow mach-lookup
(global-name "com.apple.ctkd.token-client")
Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (275241 => 275242)
--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2021-03-30 22:01:48 UTC (rev 275241)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2021-03-30 22:25:29 UTC (rev 275242)
@@ -827,7 +827,9 @@
#if ENABLE(CFPREFS_DIRECT_MODE)
(allow file-read*
+ (literal "/Library/Preferences/.GlobalPreferences.plist")
(home-subpath "/Library/Preferences/.GlobalPreferences.plist")
+ (home-subpath "/Library/Preferences/.GlobalPreferences_m.plist")
(home-subpath "/Library/Preferences/com.apple.security.plist")
(home-subpath "/Library/Preferences/com.apple.Accessibility.plist")
(home-subpath "/Library/Preferences/com.apple.ATS.plist")
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
