Title: [208707] trunk/Source/WebKit2
- Revision
- 208707
- Author
- bfulg...@apple.com
- Date
- 2016-11-14 13:38:02 -0800 (Mon, 14 Nov 2016)
Log Message
Unreviewed sandbox fix after r208702
Correct version check to avoid breaking users in Safari Technology Preview
or WebKit nightlies.
* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
* WebProcess/com.apple.WebProcess.sb.in:
Modified Paths
Diff
Modified: trunk/Source/WebKit2/ChangeLog (208706 => 208707)
--- trunk/Source/WebKit2/ChangeLog 2016-11-14 21:37:03 UTC (rev 208706)
+++ trunk/Source/WebKit2/ChangeLog 2016-11-14 21:38:02 UTC (rev 208707)
@@ -1,3 +1,13 @@
+2016-11-14 Brent Fulgham <bfulg...@apple.com>
+
+ Unreviewed sandbox fix after r208702
+
+ Correct version check to avoid breaking users in Safari Technology Preview
+ or WebKit nightlies.
+
+ * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+ * WebProcess/com.apple.WebProcess.sb.in:
+
2016-11-14 Pranjal Jumde <pju...@apple.com>
Keychain access in WebKit should be limited to a single process. Earlier this was blocked on the networking framework requiring direct access to keychain, this will be resolved in the upcoming version of macOS.
Modified: trunk/Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (208706 => 208707)
--- trunk/Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in 2016-11-14 21:37:03 UTC (rev 208706)
+++ trunk/Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in 2016-11-14 21:38:02 UTC (rev 208707)
@@ -109,7 +109,7 @@
(global-name "com.apple.CoreAuthentication.agent.libxpc")
(global-name "com.apple.SecurityServer"))
-#if __MAC_OS_X_VERSION_MIN_REQUIRED < 101200
+#if __MAC_OS_X_VERSION_MIN_REQUIRED < 101240
(allow file-read* file-write* (home-subpath "/Library/Keychains")) ;; FIXME: This should be removed when <rdar://problem/10479685> is fixed.
#endif
@@ -116,7 +116,7 @@
(allow file-read* file-write* (subpath "/private/var/db/mds/system")) ;; FIXME: This should be removed when <rdar://problem/9538414> is fixed.
(allow file-read*
-#if __MAC_OS_X_VERSION_MIN_REQUIRED < 101200
+#if __MAC_OS_X_VERSION_MIN_REQUIRED < 101240
(subpath "/Library/Keychains")
#endif
(subpath "/private/var/db/mds")
Modified: trunk/Source/WebKit2/WebProcess/com.apple.WebProcess.sb.in (208706 => 208707)
--- trunk/Source/WebKit2/WebProcess/com.apple.WebProcess.sb.in 2016-11-14 21:37:03 UTC (rev 208706)
+++ trunk/Source/WebKit2/WebProcess/com.apple.WebProcess.sb.in 2016-11-14 21:38:02 UTC (rev 208707)
@@ -208,7 +208,7 @@
(global-name "com.apple.CoreAuthentication.agent.libxpc")
(global-name "com.apple.SecurityServer"))
-#if __MAC_OS_X_VERSION_MIN_REQUIRED < 101200
+#if __MAC_OS_X_VERSION_MIN_REQUIRED < 101240
(allow file-read* file-write* (home-subpath "/Library/Keychains")) ;; FIXME: This should be removed when <rdar://problem/10479685> is fixed.
#endif
@@ -215,7 +215,7 @@
(allow file-read* file-write* (subpath "/private/var/db/mds/system")) ;; FIXME: This should be removed when <rdar://problem/9538414> is fixed.
(allow file-read*
-#if __MAC_OS_X_VERSION_MIN_REQUIRED < 101200
+#if __MAC_OS_X_VERSION_MIN_REQUIRED < 101240
(subpath "/Library/Keychains")
#endif
(subpath "/private/var/db/mds")
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
