Title: [287413] trunk/Source/WebKit
Revision
287413
Author
[email protected]
Date
2021-12-23 14:00:33 -0800 (Thu, 23 Dec 2021)

Log Message

Allow a necessary syscall in the WebContent sandbox
https://bugs.webkit.org/show_bug.cgi?id=234641
<rdar://problem/86808395>

Reviewed by Alan Bujtas.

Telemetry and testing logs indicate that we need to allow
'SYS_memorystatus_control' in our WebContent sandbox.

We allow this in all other sandboxes, so this was likely an oversight.

* WebProcess/com.apple.WebProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (287412 => 287413)


--- trunk/Source/WebKit/ChangeLog	2021-12-23 21:50:28 UTC (rev 287412)
+++ trunk/Source/WebKit/ChangeLog	2021-12-23 22:00:33 UTC (rev 287413)
@@ -1,3 +1,18 @@
+2021-12-23  Brent Fulgham  <[email protected]>
+
+        Allow a necessary syscall in the WebContent sandbox
+        https://bugs.webkit.org/show_bug.cgi?id=234641
+        <rdar://problem/86808395>
+
+        Reviewed by Alan Bujtas.
+
+        Telemetry and testing logs indicate that we need to allow
+        'SYS_memorystatus_control' in our WebContent sandbox.
+
+        We allow this in all other sandboxes, so this was likely an oversight.
+
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2021-12-23  Brady Eidson  <[email protected]>
 
         Add WTF::UUID class which is natively a 128-bit integer

Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (287412 => 287413)


--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2021-12-23 21:50:28 UTC (rev 287412)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2021-12-23 22:00:33 UTC (rev 287413)
@@ -1945,6 +1945,7 @@
         SYS_lseek
         SYS_lstat64
         SYS_madvise
+        SYS_memorystatus_control
         SYS_mincore
         SYS_mkdir
         SYS_mmap
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to