Title: [171090] trunk/Source/WebKit2
Revision
171090
Author
oli...@apple.com
Date
2014-07-14 16:13:56 -0700 (Mon, 14 Jul 2014)

Log Message

Restrict network process to remote connections
https://bugs.webkit.org/show_bug.cgi?id=134908

Reviewed by Geoffrey Garen.

Further restrict network client

* Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:

Modified Paths

Diff

Modified: trunk/Source/WebKit2/ChangeLog (171089 => 171090)


--- trunk/Source/WebKit2/ChangeLog	2014-07-14 22:32:01 UTC (rev 171089)
+++ trunk/Source/WebKit2/ChangeLog	2014-07-14 23:13:56 UTC (rev 171090)
@@ -1,3 +1,14 @@
+2014-07-14  Oliver Hunt  <oli...@apple.com>
+
+        Restrict network process to remote connections
+        https://bugs.webkit.org/show_bug.cgi?id=134908
+
+        Reviewed by Geoffrey Garen.
+
+        Further restrict network client
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+
 2014-07-14  Tim Horton  <timothy_hor...@apple.com>
 
         ASSERT(isMainThread()) under OneShotDisplayLinkHandler

Modified: trunk/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb (171089 => 171090)


--- trunk/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb	2014-07-14 22:32:01 UTC (rev 171089)
+++ trunk/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb	2014-07-14 23:13:56 UTC (rev 171090)
@@ -53,7 +53,7 @@
 (allow mach-lookup
        (global-name "com.apple.PowerManagement.control"))
 
-(network-client)
+(network-client (remote tcp))
 
 ;; Security framework
 (allow mach-lookup
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to