Title: [174735] trunk/Source/WebKit2
Revision
174735
Author
[email protected]
Date
2014-10-15 11:00:10 -0700 (Wed, 15 Oct 2014)

Log Message

[Mac] Allow some Kerberos related paths in sandbox
https://bugs.webkit.org/show_bug.cgi?id=137666
rdar://problem/17965010

Reviewed by Darin Adler.

* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
* WebProcess/com.apple.WebProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit2/ChangeLog (174734 => 174735)


--- trunk/Source/WebKit2/ChangeLog	2014-10-15 18:00:05 UTC (rev 174734)
+++ trunk/Source/WebKit2/ChangeLog	2014-10-15 18:00:10 UTC (rev 174735)
@@ -1,5 +1,16 @@
 2014-10-15  Alexey Proskuryakov  <[email protected]>
 
+        [Mac] Allow some Kerberos related paths in sandbox
+        https://bugs.webkit.org/show_bug.cgi?id=137666
+        rdar://problem/17965010
+
+        Reviewed by Darin Adler.
+
+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
+2014-10-15  Alexey Proskuryakov  <[email protected]>
+
         [Mac] Allow plug-ins to read managed preferences
         https://bugs.webkit.org/show_bug.cgi?id=137665
         <rdar://problem/18255601>

Modified: trunk/Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (174734 => 174735)


--- trunk/Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2014-10-15 18:00:05 UTC (rev 174734)
+++ trunk/Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2014-10-15 18:00:10 UTC (rev 174735)
@@ -141,7 +141,9 @@
     (literal "/Library/Preferences/edu.mit.Kerberos")
     (literal "/private/etc/krb5.conf")
     (literal "/private/etc/services")
-    (literal "/private/etc/host"))
+    (literal "/private/etc/host")
+    (subpath "/Library/KerberosPlugins/GSSAPI")
+    (subpath "/Library/KerberosPlugins/KerberosFrameworkPlugins"))
 
 (if (defined? 'vnode-type)
     (deny file-write-create (vnode-type SYMLINK)))

Modified: trunk/Source/WebKit2/WebProcess/com.apple.WebProcess.sb.in (174734 => 174735)


--- trunk/Source/WebKit2/WebProcess/com.apple.WebProcess.sb.in	2014-10-15 18:00:05 UTC (rev 174734)
+++ trunk/Source/WebKit2/WebProcess/com.apple.WebProcess.sb.in	2014-10-15 18:00:10 UTC (rev 174735)
@@ -272,7 +272,9 @@
         (literal "/Library/Preferences/edu.mit.Kerberos")
         (literal "/private/etc/krb5.conf")
         (literal "/private/etc/services")
-        (literal "/private/etc/host"))
+        (literal "/private/etc/host")
+        (subpath "/Library/KerberosPlugins/GSSAPI")
+        (subpath "/Library/KerberosPlugins/KerberosFrameworkPlugins"))
 
 (if (defined? 'vnode-type)
         (deny file-write-create (vnode-type SYMLINK)))
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to