Title: [284864] trunk/Source/WebKit
Revision
284864
Author
[email protected]
Date
2021-10-26 07:28:58 -0700 (Tue, 26 Oct 2021)

Log Message

[iOS][WP] Reduce sandbox telemetry
https://bugs.webkit.org/show_bug.cgi?id=232279
<rdar://problem/84634347>

Reviewed by Brent Fulgham.

Reduce sandbox telemetry for rules we already have collected information for.

* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (284863 => 284864)


--- trunk/Source/WebKit/ChangeLog	2021-10-26 12:16:35 UTC (rev 284863)
+++ trunk/Source/WebKit/ChangeLog	2021-10-26 14:28:58 UTC (rev 284864)
@@ -1,3 +1,15 @@
+2021-10-26  Per Arne  <[email protected]>
+
+        [iOS][WP] Reduce sandbox telemetry
+        https://bugs.webkit.org/show_bug.cgi?id=232279
+        <rdar://problem/84634347>
+
+        Reviewed by Brent Fulgham.
+
+        Reduce sandbox telemetry for rules we already have collected information for.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+
 2021-10-26  Youenn Fablet  <[email protected]>
 
         Only one AudioSampleDataSource::pullSamples is needed

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (284863 => 284864)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in	2021-10-26 12:16:35 UTC (rev 284863)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in	2021-10-26 14:28:58 UTC (rev 284864)
@@ -1271,7 +1271,10 @@
         (syscall-number SYS_ulock_wake)
         (syscall-number SYS_workq_kernreturn)
         (syscall-number SYS_workq_open))
-    
+
+    (allow syscall-unix (with telemetry)
+        (syscall-number SYS_objc_bp_assist_cfg_np))
+
     (allow syscall-unix (with telemetry-backtrace)
         (syscall-number SYS___pthread_kill)
         (syscall-number SYS___pthread_markcancel)
@@ -1309,7 +1312,6 @@
         (syscall-number SYS_munlock)
         (syscall-number SYS_necp_client_action)
         (syscall-number SYS_necp_open)
-        (syscall-number SYS_objc_bp_assist_cfg_np)
         (syscall-number SYS_open)
         (syscall-number SYS_open_dprotected_np)
         (syscall-number SYS_open_nocancel)
@@ -1392,7 +1394,7 @@
         (fcntl-command F_SETFL) ;; CMCapture uses when camera is enabled
         (fcntl-command F_SETNOSIGPIPE)) ;; CMCapture uses when camera is enabled
 
-    (allow system-fcntl (with telemetry-backtrace)
+    (allow system-fcntl (with telemetry)
         (fcntl-command F_OFD_SETLK))
 
     (allow system-fcntl
@@ -1541,12 +1543,14 @@
                 mach_vm_region_recurse
                 task_set_exc_guard_behavior
                 task_threads_from_user
-                thread_info
                 thread_policy
-                thread_policy_set
                 (when (defined? 'vm_copy) vm_copy)
                 (when (defined? 'vm_remap_external) vm_remap_external)))
 
+            (allow mach-message-send (with telemetry) (kernel-mig-routine
+                thread_info
+                thread_policy_set))
+
             (allow mach-message-send (kernel-mig-routine
                 (when (defined? '_mach_make_memory_entry) _mach_make_memory_entry)
                 host_get_clock_service
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to