Title: [284864] trunk/Source/WebKit
- Revision
- 284864
- Author
- [email protected]
- Date
- 2021-10-26 07:28:58 -0700 (Tue, 26 Oct 2021)
Log Message
[iOS][WP] Reduce sandbox telemetry
https://bugs.webkit.org/show_bug.cgi?id=232279
<rdar://problem/84634347>
Reviewed by Brent Fulgham.
Reduce sandbox telemetry for rules we already have collected information for.
* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (284863 => 284864)
--- trunk/Source/WebKit/ChangeLog 2021-10-26 12:16:35 UTC (rev 284863)
+++ trunk/Source/WebKit/ChangeLog 2021-10-26 14:28:58 UTC (rev 284864)
@@ -1,3 +1,15 @@
+2021-10-26 Per Arne <[email protected]>
+
+ [iOS][WP] Reduce sandbox telemetry
+ https://bugs.webkit.org/show_bug.cgi?id=232279
+ <rdar://problem/84634347>
+
+ Reviewed by Brent Fulgham.
+
+ Reduce sandbox telemetry for rules we already have collected information for.
+
+ * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+
2021-10-26 Youenn Fablet <[email protected]>
Only one AudioSampleDataSource::pullSamples is needed
Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (284863 => 284864)
--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in 2021-10-26 12:16:35 UTC (rev 284863)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in 2021-10-26 14:28:58 UTC (rev 284864)
@@ -1271,7 +1271,10 @@
(syscall-number SYS_ulock_wake)
(syscall-number SYS_workq_kernreturn)
(syscall-number SYS_workq_open))
-
+
+ (allow syscall-unix (with telemetry)
+ (syscall-number SYS_objc_bp_assist_cfg_np))
+
(allow syscall-unix (with telemetry-backtrace)
(syscall-number SYS___pthread_kill)
(syscall-number SYS___pthread_markcancel)
@@ -1309,7 +1312,6 @@
(syscall-number SYS_munlock)
(syscall-number SYS_necp_client_action)
(syscall-number SYS_necp_open)
- (syscall-number SYS_objc_bp_assist_cfg_np)
(syscall-number SYS_open)
(syscall-number SYS_open_dprotected_np)
(syscall-number SYS_open_nocancel)
@@ -1392,7 +1394,7 @@
(fcntl-command F_SETFL) ;; CMCapture uses when camera is enabled
(fcntl-command F_SETNOSIGPIPE)) ;; CMCapture uses when camera is enabled
- (allow system-fcntl (with telemetry-backtrace)
+ (allow system-fcntl (with telemetry)
(fcntl-command F_OFD_SETLK))
(allow system-fcntl
@@ -1541,12 +1543,14 @@
mach_vm_region_recurse
task_set_exc_guard_behavior
task_threads_from_user
- thread_info
thread_policy
- thread_policy_set
(when (defined? 'vm_copy) vm_copy)
(when (defined? 'vm_remap_external) vm_remap_external)))
+ (allow mach-message-send (with telemetry) (kernel-mig-routine
+ thread_info
+ thread_policy_set))
+
(allow mach-message-send (kernel-mig-routine
(when (defined? '_mach_make_memory_entry) _mach_make_memory_entry)
host_get_clock_service
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes