Title: [284265] trunk/Source/WebKit
Revision
284265
Author
[email protected]
Date
2021-10-15 12:43:44 -0700 (Fri, 15 Oct 2021)

Log Message

[macOS] Sort unix syscall list in WP sandbox
https://bugs.webkit.org/show_bug.cgi?id=231810
<rdar://problem/84305761>

Unreviewed formatting change. No change in behavior.


* WebProcess/com.apple.WebProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (284264 => 284265)


--- trunk/Source/WebKit/ChangeLog	2021-10-15 19:16:17 UTC (rev 284264)
+++ trunk/Source/WebKit/ChangeLog	2021-10-15 19:43:44 UTC (rev 284265)
@@ -1,3 +1,13 @@
+2021-10-15  Per Arne Vollan  <[email protected]>
+
+        [macOS] Sort unix syscall list in WP sandbox
+        https://bugs.webkit.org/show_bug.cgi?id=231810
+        <rdar://problem/84305761>
+
+        Unreviewed formatting change. No change in behavior.
+
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2021-10-15  BJ Burg  <[email protected]>
 
         [Cocoa] Web Inspector: handle Promise objects returned from evaluateScriptInExtensionTab

Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (284264 => 284265)


--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2021-10-15 19:16:17 UTC (rev 284264)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2021-10-15 19:43:44 UTC (rev 284265)
@@ -1864,169 +1864,169 @@
 (when (defined? 'syscall-unix)
     (deny syscall-unix (with send-signal SIGKILL))
     (allow syscall-unix
+        (syscall-number SYS___disable_threadsignal)
+        (syscall-number SYS___mac_syscall)
+        (syscall-number SYS___pthread_kill)
+        (syscall-number SYS___pthread_markcancel)
+        (syscall-number SYS___pthread_sigmask)
+        (syscall-number SYS___semwait_signal)
+        (syscall-number SYS___semwait_signal_nocancel)
         (syscall-number SYS_abort_with_payload)
-        (syscall-number SYS_exit)
-        (syscall-number SYS_read)
-        (syscall-number SYS_write)
-        (syscall-number SYS_open)
-        (syscall-number SYS_close)
-        (syscall-number SYS_unlink)
+        (syscall-number SYS_access)
+        (syscall-number SYS_bsdthread_create)
+        (syscall-number SYS_bsdthread_ctl)
+        (syscall-number SYS_bsdthread_terminate)
+        (syscall-number SYS_change_fdguard_np)
         (syscall-number SYS_chmod)
         (syscall-number SYS_chmod_extended)
-        (syscall-number SYS_getuid)
-        (syscall-number SYS_geteuid)
-        (syscall-number SYS_recvfrom)
-        (syscall-number SYS_getpeername)
-        (syscall-number SYS_access)
+        (syscall-number SYS_close)
+        (syscall-number SYS_close_nocancel)
+        (syscall-number SYS_connect)
+        (syscall-number SYS_connect_nocancel)
+        (syscall-number SYS_connectx)
+        (syscall-number SYS_csops)
+        (syscall-number SYS_csops_audittoken)
+        (syscall-number SYS_csrctl)
         (syscall-number SYS_dup)
-        (syscall-number SYS_pipe)
+        (syscall-number SYS_exit)
+        (syscall-number SYS_faccessat) ;; <rdar://problem/56690456>
+        (syscall-number SYS_fchmod)
+        (syscall-number SYS_fcntl)
+        (syscall-number SYS_fcntl_nocancel)
+        (syscall-number SYS_fgetattrlist) ;; <rdar://problem/50931110>
+        (syscall-number SYS_fgetxattr)
+        (syscall-number SYS_fileport_makefd)
+        (syscall-number SYS_fileport_makeport)
+        (syscall-number SYS_flock)
+        (syscall-number SYS_fsetxattr) ;; <rdar://problem/56332491>
+        (syscall-number SYS_fsgetpath)
+        (syscall-number SYS_fstat64)
+        (syscall-number SYS_fstat64_extended) ;; <rdar://problem/61310019>
+        (syscall-number SYS_fstatat64)
+        (syscall-number SYS_fstatfs64)
+        (syscall-number SYS_fsync)
+        (syscall-number SYS_ftruncate)
+        (syscall-number SYS_getattrlist)
+        (syscall-number SYS_getattrlistbulk)
+        (syscall-number SYS_getaudit_addr)
+        (syscall-number SYS_getdirentries64)
         (syscall-number SYS_getegid)
+        (syscall-number SYS_getentropy)
+        (syscall-number SYS_geteuid)
+        (syscall-number SYS_getfsstat64)
         (syscall-number SYS_getgid)
-        (syscall-number SYS_sigprocmask)
-        (syscall-number SYS_sigaltstack)
+        (syscall-number SYS_gethostuuid)
+        (syscall-number SYS_getpeername)
+        (syscall-number SYS_getpriority) ;; rdar://81727094. Required for CoreAudio AudioOutputUnitStart call. Remove when GPU process is enabled by default.
+        (syscall-number SYS_getrlimit)
+        (syscall-number SYS_getrusage)
+        (syscall-number SYS_getsockopt)
+        (syscall-number SYS_gettid) ;; Needed for base system, see <rdar://problem/48651255>
+        (syscall-number SYS_gettimeofday)
+        (syscall-number SYS_getuid)
+        (syscall-number SYS_getxattr)
+        (syscall-number SYS_guarded_close_np)
+        (syscall-number SYS_guarded_open_np)
+        (syscall-number SYS_guarded_pwrite_np)
+        (syscall-number SYS_guarded_write_np)
         (syscall-number SYS_ioctl)
-        (syscall-number SYS_readlink)
-        (syscall-number SYS_umask)
-        (syscall-number SYS_msync)
-        (syscall-number SYS_munmap)
-        (syscall-number SYS_mprotect)
+        (syscall-number SYS_issetugid)
+        (syscall-number SYS_kdebug_trace)
+        (syscall-number SYS_kdebug_trace64)
+        (syscall-number SYS_kdebug_trace_string) ;; Needed for performance sampling, see <rdar://problem/48829655>.
+        (syscall-number SYS_kevent)
+        (syscall-number SYS_kevent_id)
+        (syscall-number SYS_kevent_qos)
+        (syscall-number SYS_kqueue) ;; <rdar://problem/49609201>
+        (syscall-number SYS_kqueue_workloop_ctl) ;; <rdar://problem/50999499>
+        (syscall-number SYS_listxattr)
+        (syscall-number SYS_lseek)
+        (syscall-number SYS_lstat64)
+        (syscall-number SYS_lstat64_extended)
+        (syscall-number SYS_lstat_extended)
         (syscall-number SYS_madvise)
+        (syscall-number SYS_memorystatus_control) ;; Needed for memory measurement infrastructure, see <rdar://problem/48647263>
         (syscall-number SYS_mincore)
-        (syscall-number SYS_fcntl)
-        (syscall-number SYS_select)
-        (syscall-number SYS_fsync)
-        (syscall-number SYS_setpriority)
-        (syscall-number SYS_socket)
-        (syscall-number SYS_connect)
-        (syscall-number SYS_setsockopt)
-        (syscall-number SYS_gettimeofday)
-        (syscall-number SYS_getrusage)
-        (syscall-number SYS_getsockopt)
-        (syscall-number SYS_writev)
-        (syscall-number SYS_fchmod)
-        (syscall-number SYS_rename)
-        (syscall-number SYS_flock)
-        (syscall-number SYS_sendto)
-        (syscall-number SYS_shutdown)
-        (syscall-number SYS_socketpair)
         (syscall-number SYS_mkdir)
-        (syscall-number SYS_rmdir)
-        (syscall-number SYS_pread)
-        (syscall-number SYS_pwrite)
-        (syscall-number SYS_csops)
-        (syscall-number SYS_csops_audittoken)
-        (syscall-number SYS_kdebug_trace64)
-        (syscall-number SYS_kdebug_trace)
-        (syscall-number SYS_sigaction)
-        (syscall-number SYS_sigreturn)
-        (syscall-number SYS_pathconf)
-        (syscall-number SYS_getrlimit)
-        (syscall-number SYS_setrlimit)
+        (syscall-number SYS_mkdirat)
+        (syscall-number SYS_mlock)
         (syscall-number SYS_mmap)
-        (syscall-number SYS_lseek)
-        (syscall-number SYS_ftruncate)
-        (syscall-number SYS_sysctl)
-        (syscall-number SYS_mlock)
+        (syscall-number SYS_mprotect)
+        (syscall-number SYS_msync)
         (syscall-number SYS_munlock)
-        (syscall-number SYS_getattrlist)
-        (syscall-number SYS_getxattr)
-        (syscall-number SYS_fgetxattr)
-        (syscall-number SYS_listxattr)
-        (syscall-number SYS_shm_open)
-        (syscall-number SYS_sem_wait)
-        (syscall-number SYS_sem_post)
-        (syscall-number SYS_sysctlbyname)
-        (syscall-number SYS_psynch_mutexwait)
-        (syscall-number SYS_psynch_mutexdrop)
+        (syscall-number SYS_munmap)
+        (syscall-number SYS_necp_client_action)
+        (syscall-number SYS_necp_open)
+        (syscall-number SYS_open)
+        (syscall-number SYS_open_dprotected_np) ;; <rdar://problem/74473824>
+        (syscall-number SYS_open_nocancel)
+        (syscall-number SYS_openat)
+        (syscall-number SYS_openat_nocancel)
+        (syscall-number SYS_pathconf)
+        (syscall-number SYS_pipe)
+        (syscall-number SYS_pread)
+        (syscall-number SYS_proc_info)
+        (syscall-number SYS_proc_rlimit_control)
+        (syscall-number SYS_process_policy)
         (syscall-number SYS_psynch_cvbroad)
+        (syscall-number SYS_psynch_cvclrprepost)
         (syscall-number SYS_psynch_cvsignal)
         (syscall-number SYS_psynch_cvwait)
+        (syscall-number SYS_psynch_mutexdrop)
+        (syscall-number SYS_psynch_mutexwait)
+        (syscall-number SYS_psynch_rw_rdlock) ;; <rdar://problem/49060359>
+        (syscall-number SYS_psynch_rw_unlock)
         (syscall-number SYS_psynch_rw_wrlock)
-        (syscall-number SYS_psynch_rw_unlock)
-        (syscall-number SYS_psynch_cvclrprepost)
-        (syscall-number SYS_process_policy)
-        (syscall-number SYS_issetugid)
-        (syscall-number SYS___pthread_kill)
-        (syscall-number SYS___pthread_markcancel)
-        (syscall-number SYS___pthread_sigmask)
-        (syscall-number SYS___disable_threadsignal)
-        (syscall-number SYS___semwait_signal)
-        (syscall-number SYS___semwait_signal_nocancel)
-        (syscall-number SYS_proc_info)
+        (syscall-number SYS_pwrite)
+        (syscall-number SYS_quotactl) ;; <rdar://problem/49945031>
+        (syscall-number SYS_read)
+        (syscall-number SYS_read_nocancel)
+        (syscall-number SYS_readlink)
+        (syscall-number SYS_recvfrom)
+        (syscall-number SYS_recvfrom_nocancel)
+        (syscall-number SYS_rename)
+        (syscall-number SYS_rmdir)
+        (syscall-number SYS_select)
+        (syscall-number SYS_select_nocancel)
+        (syscall-number SYS_sem_post)
+        (syscall-number SYS_sem_wait)
+        (syscall-number SYS_sendmsg_nocancel)
+        (syscall-number SYS_sendto)
+        (syscall-number SYS_sendto_nocancel)
+#if __MAC_OS_X_VERSION_MIN_REQUIRED < 120000
+        (syscall-number SYS_setattrlist) ;; rdar://problem/74162777
+#endif
+        (syscall-number SYS_setpriority)
+        (syscall-number SYS_setrlimit)
+        (syscall-number SYS_setsockopt)
+        (syscall-number SYS_shm_open)
+        (syscall-number SYS_shutdown)
+        (syscall-number SYS_sigaction)
+        (syscall-number SYS_sigaltstack)
+        (syscall-number SYS_sigprocmask)
+        (syscall-number SYS_sigreturn)
+        (syscall-number SYS_socket)
+        (syscall-number SYS_socketpair)
         (syscall-number SYS_stat64)
-        (syscall-number SYS_fstat64)
-        (syscall-number SYS_lstat64)
-        (syscall-number SYS_getdirentries64)
+        (syscall-number SYS_stat64_extended) ;; <rdar://problem/50473330>
         (syscall-number SYS_statfs64)
-        (syscall-number SYS_fstatfs64)
-        (syscall-number SYS_getfsstat64)
-        (syscall-number SYS_getaudit_addr)
-        (syscall-number SYS_bsdthread_create)
-        (syscall-number SYS_bsdthread_terminate)
-        (syscall-number SYS_workq_kernreturn)
+        (syscall-number SYS_sysctl)
+        (syscall-number SYS_sysctlbyname)
+        (syscall-number SYS_terminate_with_payload) ;; <rdar://problem/50026580>
         (syscall-number SYS_thread_selfid)
         (syscall-number SYS_thread_selfusage)
-        (syscall-number SYS_kevent)
-        (syscall-number SYS_kevent_qos)
-        (syscall-number SYS_kevent_id)
-        (syscall-number SYS___mac_syscall)
-        (syscall-number SYS_read_nocancel)
-        (syscall-number SYS_write_nocancel)
-        (syscall-number SYS_open_nocancel)
-        (syscall-number SYS_close_nocancel)
-        (syscall-number SYS_sendmsg_nocancel)
-        (syscall-number SYS_recvfrom_nocancel)
-        (syscall-number SYS_fcntl_nocancel)
-        (syscall-number SYS_select_nocancel)
-        (syscall-number SYS_connect_nocancel)
-        (syscall-number SYS_sendto_nocancel)
-        (syscall-number SYS_fsgetpath)
-        (syscall-number SYS_fileport_makefd)
-        (syscall-number SYS_fileport_makeport)
-        (syscall-number SYS_guarded_open_np)
-        (syscall-number SYS_guarded_close_np)
-        (syscall-number SYS_guarded_write_np)
-        (syscall-number SYS_change_fdguard_np)
-        (syscall-number SYS_proc_rlimit_control)
-        (syscall-number SYS_connectx)
-        (syscall-number SYS_getattrlistbulk)
-        (syscall-number SYS_openat)
-        (syscall-number SYS_openat_nocancel)
-        (syscall-number SYS_fstatat64)
-        (syscall-number SYS_mkdirat)
-        (syscall-number SYS_bsdthread_ctl)
-        (syscall-number SYS_csrctl)
-        (syscall-number SYS_guarded_pwrite_np)
-        (syscall-number SYS_getentropy)
-        (syscall-number SYS_necp_open)
-        (syscall-number SYS_necp_client_action)
         (syscall-number SYS_ulock_wait)
-        (syscall-number SYS_ulock_wake)
-        (syscall-number SYS_work_interval_ctl)
-        (syscall-number SYS_gettid) ;; Needed for base system, see <rdar://problem/48651255>
-        (syscall-number SYS_memorystatus_control) ;; Needed for memory measurement infrastructure, see <rdar://problem/48647263>
-        (syscall-number SYS_kdebug_trace_string) ;; Needed for performance sampling, see <rdar://problem/48829655>.
-        (syscall-number SYS_psynch_rw_rdlock) ;; <rdar://problem/49060359>
-        (syscall-number SYS_terminate_with_payload) ;; <rdar://problem/50026580>
-        (syscall-number SYS_quotactl) ;; <rdar://problem/49945031>
-        (syscall-number SYS_stat64_extended) ;; <rdar://problem/50473330>
-        (syscall-number SYS_lstat_extended)
-        (syscall-number SYS_lstat64_extended)
-        (syscall-number SYS_fgetattrlist) ;; <rdar://problem/50931110>
-        (syscall-number SYS_kqueue) ;; <rdar://problem/49609201>
-        (syscall-number SYS_kqueue_workloop_ctl) ;; <rdar://problem/50999499>
-        (syscall-number SYS_faccessat) ;; <rdar://problem/56690456>
-        (syscall-number SYS_fsetxattr) ;; <rdar://problem/56332491>
 #if __MAC_OS_X_VERSION_MIN_REQUIRED >= 110000
         (syscall-number SYS_ulock_wait2) ;; <rdar://problem/58743778>
 #endif
-        (syscall-number SYS_fstat64_extended) ;; <rdar://problem/61310019>
-        (syscall-number SYS_gethostuuid)
-#if __MAC_OS_X_VERSION_MIN_REQUIRED < 120000
-        (syscall-number SYS_setattrlist) ;; rdar://problem/74162777
-#endif
-        (syscall-number SYS_open_dprotected_np) ;; <rdar://problem/74473824>
-        (syscall-number SYS_getpriority) ;; rdar://81727094. Required for CoreAudio AudioOutputUnitStart call. Remove when GPU process is enabled by default.
+        (syscall-number SYS_ulock_wake)
+        (syscall-number SYS_umask)
+        (syscall-number SYS_unlink)
+        (syscall-number SYS_work_interval_ctl)
+        (syscall-number SYS_workq_kernreturn)
+        (syscall-number SYS_write)
+        (syscall-number SYS_write_nocancel)
+        (syscall-number SYS_writev)
     )
 
     (if (equal? (param "CPU") "arm64")
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to