Title: [285969] branches/safari-613.1.9-branch/Source/WebKit
- Revision
- 285969
- Author
- [email protected]
- Date
- 2021-11-17 18:29:44 -0800 (Wed, 17 Nov 2021)
Log Message
Cherry-pick r285869. rdar://problem/85529891
[macOS][GPUP] Add telemetry for syscalls
https://bugs.webkit.org/show_bug.cgi?id=232888
<rdar://problem/85207011>
Reviewed by Brent Fulgham.
Add more telemetry for syscalls in the GPU process' sandbox on macOS. Also add entitlement for the GPU
process to use message filtering.
* GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
* Scripts/process-entitlements.sh:
git-svn-id: https://svn.webkit.org/repository/webkit/trunk@285869 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Modified Paths
Diff
Modified: branches/safari-613.1.9-branch/Source/WebKit/ChangeLog (285968 => 285969)
--- branches/safari-613.1.9-branch/Source/WebKit/ChangeLog 2021-11-18 02:29:40 UTC (rev 285968)
+++ branches/safari-613.1.9-branch/Source/WebKit/ChangeLog 2021-11-18 02:29:44 UTC (rev 285969)
@@ -1,5 +1,38 @@
2021-11-17 Alan Coon <[email protected]>
+ Cherry-pick r285869. rdar://problem/85529891
+
+ [macOS][GPUP] Add telemetry for syscalls
+ https://bugs.webkit.org/show_bug.cgi?id=232888
+ <rdar://problem/85207011>
+
+ Reviewed by Brent Fulgham.
+
+ Add more telemetry for syscalls in the GPU process' sandbox on macOS. Also add entitlement for the GPU
+ process to use message filtering.
+
+ * GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
+ * Scripts/process-entitlements.sh:
+
+
+ git-svn-id: https://svn.webkit.org/repository/webkit/trunk@285869 268f45cc-cd09-0410-ab3c-d52691b4dbfc
+
+ 2021-11-16 Per Arne Vollan <[email protected]>
+
+ [macOS][GPUP] Add telemetry for syscalls
+ https://bugs.webkit.org/show_bug.cgi?id=232888
+ <rdar://problem/85207011>
+
+ Reviewed by Brent Fulgham.
+
+ Add more telemetry for syscalls in the GPU process' sandbox on macOS. Also add entitlement for the GPU
+ process to use message filtering.
+
+ * GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
+ * Scripts/process-entitlements.sh:
+
+2021-11-17 Alan Coon <[email protected]>
+
Cherry-pick r285809. rdar://problem/85529891
Unreviewed, reverting r285774.
Modified: branches/safari-613.1.9-branch/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in (285968 => 285969)
--- branches/safari-613.1.9-branch/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in 2021-11-18 02:29:40 UTC (rev 285968)
+++ branches/safari-613.1.9-branch/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in 2021-11-18 02:29:44 UTC (rev 285969)
@@ -856,6 +856,41 @@
)
)
+(when (and (equal? (param "ENABLE_SANDBOX_MESSAGE_FILTER") "YES") (defined? 'mach-kernel-endpoint))
+ (allow mach-kernel-endpoint
+ (apply-message-filter
+ (allow mach-message-send (with telemetry)))))
+
+(when (and (equal? (param "ENABLE_SANDBOX_MESSAGE_FILTER") "YES") (defined? 'syscall-mach))
+ (allow syscall-mach (with telemetry))
+ (allow syscall-mach (machtrap-number
+ MSC__kernelrpc_mach_port_allocate_trap
+ MSC__kernelrpc_mach_port_construct_trap
+ MSC__kernelrpc_mach_port_deallocate_trap
+ MSC__kernelrpc_mach_port_destruct_trap
+ MSC__kernelrpc_mach_port_extract_member_trap
+ MSC__kernelrpc_mach_port_guard_trap
+ MSC__kernelrpc_mach_port_insert_member_trap
+ MSC__kernelrpc_mach_port_insert_right_trap
+ MSC__kernelrpc_mach_port_mod_refs_trap
+ MSC__kernelrpc_mach_port_request_notification_trap
+ MSC__kernelrpc_mach_port_type_trap
+ MSC__kernelrpc_mach_vm_allocate_trap
+ MSC__kernelrpc_mach_vm_deallocate_trap
+ MSC__kernelrpc_mach_vm_map_trap
+ MSC__kernelrpc_mach_vm_protect_trap
+ MSC_host_create_mach_voucher_trap
+ MSC_host_self_trap
+ MSC_mach_msg_trap
+ MSC_mach_reply_port
+ MSC_mach_voucher_extract_attr_recipe_trap
+ MSC_pid_for_task
+ MSC_semaphore_signal_trap
+ MSC_semaphore_wait_trap
+ MSC_swtch_pri
+ MSC_syscall_thread_switch
+ MSC_thread_get_special_reply_port)))
+
(when (defined? 'syscall-unix)
(allow syscall-unix (with telemetry))
(allow syscall-unix (syscall-number
Modified: branches/safari-613.1.9-branch/Source/WebKit/Scripts/process-entitlements.sh (285968 => 285969)
--- branches/safari-613.1.9-branch/Source/WebKit/Scripts/process-entitlements.sh 2021-11-18 02:29:40 UTC (rev 285968)
+++ branches/safari-613.1.9-branch/Source/WebKit/Scripts/process-entitlements.sh 2021-11-18 02:29:44 UTC (rev 285969)
@@ -61,6 +61,7 @@
if (( "${TARGET_MAC_OS_X_VERSION_MAJOR}" >= 110000 ))
then
+ plistbuddy Add :com.apple.private.security.message-filter bool YES
plistbuddy Add :com.apple.security.cs.jit-write-allowlist bool YES
fi
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
