Title: [276590] trunk/Source/WebKit
Revision
276590
Author
pvol...@apple.com
Date
2021-04-26 07:28:12 -0700 (Mon, 26 Apr 2021)

Log Message

[iOS] Update sandbox message filter syntax
https://bugs.webkit.org/show_bug.cgi?id=223384

Reviewed by Brent Fulgham.

Update sandbox message filter syntax on iOS. The previous syntax should also still be supported.

* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (276589 => 276590)


--- trunk/Source/WebKit/ChangeLog	2021-04-26 14:22:45 UTC (rev 276589)
+++ trunk/Source/WebKit/ChangeLog	2021-04-26 14:28:12 UTC (rev 276590)
@@ -1,3 +1,14 @@
+2021-04-26  Per Arne Vollan  <pvol...@apple.com>
+
+        [iOS] Update sandbox message filter syntax
+        https://bugs.webkit.org/show_bug.cgi?id=223384
+
+        Reviewed by Brent Fulgham.
+
+        Update sandbox message filter syntax on iOS. The previous syntax should also still be supported.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2021-04-25  Devin Rousso  <drou...@apple.com>
 
         Add `ALWAYS_LOG_WITH_STREAM` macro for easier development/debugging

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (276589 => 276590)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2021-04-26 14:22:45 UTC (rev 276589)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2021-04-26 14:28:12 UTC (rev 276590)
@@ -1458,22 +1458,37 @@
     (deny socket-option-set (with telemetry))
 )
 
-(when (defined? 'mach-bootstrap)
+(define-once (mach-bootstrap-message-numbers)
+    (message-number
+        206
+        207
+        711
+        712
+        718
+        800
+        802
+        803
+        804
+        805
+    )
+)
+
+(if (defined? '*sbpl-version*)
     (allow mach-bootstrap
         (apply-message-filter
+            (deny mach-message-send (with telemetry))
+            (allow mach-message-send
+                (mach-bootstrap-message-numbers)
+            )
+        )
+    )
+;; else
+    (allow mach-bootstrap
+        (apply-message-filter
             (deny xpc-message-send (with telemetry))
-            (allow xpc-message-send (message-number
-                206
-                207
-                711
-                712
-                718
-                800
-                802
-                803
-                804
-                805
-            ))
+            (allow xpc-message-send
+                (mach-bootstrap-message-numbers)
+            )
         )
     )
 )
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to