Title: [289943] branches/safari-613.1.17.1-branch/Source/WebKit
Revision
289943
Author
[email protected]
Date
2022-02-16 12:23:37 -0800 (Wed, 16 Feb 2022)

Log Message

Cherry-pick r289858. rdar://problem/88787266

    [macOS] Add access to mach service in the Networking process for all users
    https://bugs.webkit.org/show_bug.cgi?id=236653
    <rdar://88787266>

    Reviewed by Brent Fulgham.

    We currently allow access to "com.apple.trustd" for the root user. Access to this service is needed for all users.
    This issue was introduced in https://trac.webkit.org/changeset/283012/webkit, and this patch also reverts this
    change for older versions of macOS.

    * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:

    git-svn-id: https://svn.webkit.org/repository/webkit/trunk@289858 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Modified Paths

Diff

Modified: branches/safari-613.1.17.1-branch/Source/WebKit/ChangeLog (289942 => 289943)


--- branches/safari-613.1.17.1-branch/Source/WebKit/ChangeLog	2022-02-16 20:22:40 UTC (rev 289942)
+++ branches/safari-613.1.17.1-branch/Source/WebKit/ChangeLog	2022-02-16 20:23:37 UTC (rev 289943)
@@ -1,5 +1,38 @@
 2022-02-16  Russell Epstein  <[email protected]>
 
+        Cherry-pick r289858. rdar://problem/88787266
+
+    [macOS] Add access to mach service in the Networking process for all users
+    https://bugs.webkit.org/show_bug.cgi?id=236653
+    <rdar://88787266>
+    
+    Reviewed by Brent Fulgham.
+    
+    We currently allow access to "com.apple.trustd" for the root user. Access to this service is needed for all users.
+    This issue was introduced in https://trac.webkit.org/changeset/283012/webkit, and this patch also reverts this
+    change for older versions of macOS.
+    
+    * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+    
+    
+    git-svn-id: https://svn.webkit.org/repository/webkit/trunk@289858 268f45cc-cd09-0410-ab3c-d52691b4dbfc
+
+    2022-02-15  Per Arne Vollan  <[email protected]>
+
+            [macOS] Add access to mach service in the Networking process for all users
+            https://bugs.webkit.org/show_bug.cgi?id=236653
+            <rdar://88787266>
+
+            Reviewed by Brent Fulgham.
+
+            We currently allow access to "com.apple.trustd" for the root user. Access to this service is needed for all users.
+            This issue was introduced in https://trac.webkit.org/changeset/283012/webkit, and this patch also reverts this
+            change for older versions of macOS.
+
+            * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+
+2022-02-16  Russell Epstein  <[email protected]>
+
         Cherry-pick r289875. rdar://problem/88358696
 
     Web Inspector: [Cocoa] Reentrancy in WebKit::WebInspectorUIProxy::open

Modified: branches/safari-613.1.17.1-branch/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (289942 => 289943)


--- branches/safari-613.1.17.1-branch/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2022-02-16 20:22:40 UTC (rev 289942)
+++ branches/safari-613.1.17.1-branch/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2022-02-16 20:23:37 UTC (rev 289943)
@@ -114,13 +114,24 @@
 (allow mach-lookup (global-name "com.apple.coreservices.launchservicesd"))
 #endif
 
+#if !PLATFORM(MAC) || __MAC_OS_X_VERSION_MIN_REQUIRED < 130000
 (allow mach-lookup
-       (global-name "com.apple.system.opendirectoryd.libinfo")
-       (global-name "com.apple.trustd.agent"))
+    (global-name
+        "com.apple.analyticsd.messagetracer"
+        "com.apple.appsleep"
+        "com.apple.bsd.dirhelper"
+        "com.apple.espd"
+        "com.apple.secinitd"
+        "com.apple.system.DirectoryService.libinfo_v1"
+        "com.apple.system.logger"
+        "com.apple.system.opendirectoryd.membership"
+        "com.apple.xpc.activity.unmanaged"))
+#endif
 
-(with-filter (uid 0)
-    (allow mach-lookup
-       (global-name "com.apple.trustd")))
+(allow mach-lookup
+    (global-name "com.apple.system.opendirectoryd.libinfo")
+    (global-name "com.apple.trustd")
+    (global-name "com.apple.trustd.agent"))
 
 (define (system-network)
     (allow file-read*
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to