Title: [221061] trunk/Source/WebKit
Revision
221061
Author
bfulg...@apple.com
Date
2017-08-22 18:05:22 -0700 (Tue, 22 Aug 2017)

Log Message

Relax keychain access to permit users to permanently allow client certificates
https://bugs.webkit.org/show_bug.cgi?id=175857
<rdar://problem/32293867>

Reviewed by Alex Christensen.

* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
* WebProcess/com.apple.WebProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (221060 => 221061)


--- trunk/Source/WebKit/ChangeLog	2017-08-23 00:32:55 UTC (rev 221060)
+++ trunk/Source/WebKit/ChangeLog	2017-08-23 01:05:22 UTC (rev 221061)
@@ -1,3 +1,14 @@
+2017-08-22  Brent Fulgham  <bfulg...@apple.com>
+
+        Relax keychain access to permit users to permanently allow client certificates
+        https://bugs.webkit.org/show_bug.cgi?id=175857
+        <rdar://problem/32293867>
+
+        Reviewed by Alex Christensen.
+
+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2017-08-22  Chris Dumez  <cdu...@apple.com>
 
         Introduce a new CompletionHandler type and use it for NetworkDataTaskClient's completion handlers to help catch bugs

Modified: trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (221060 => 221061)


--- trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2017-08-23 00:32:55 UTC (rev 221060)
+++ trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2017-08-23 01:05:22 UTC (rev 221061)
@@ -165,7 +165,7 @@
 
 ;; FIXME: This should be removed when <rdar://problem/10479685> is fixed.
 ;; Restrict AppSandboxed processes from creating /Library/Keychains, but allow access to the contents of /Library/Keychains:
-(allow file-read-data file-read-metadata file-write-data
+(allow file-read-data file-read-metadata file-write-create file-write-data
     (subpath "/Library/Keychains")
     (home-subpath "/Library/Keychains"))
 

Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (221060 => 221061)


--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2017-08-23 00:32:55 UTC (rev 221060)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2017-08-23 01:05:22 UTC (rev 221061)
@@ -430,7 +430,7 @@
 
 ;; FIXME: This should be removed when <rdar://problem/10479685> is fixed.
 ;; Restrict AppSandboxed processes from creating /Library/Keychains, but allow access to the contents of /Library/Keychains:
-(allow file-read-data file-read-metadata file-write-data
+(allow file-read-data file-read-metadata file-write-create file-write-data
     (subpath "/Library/Keychains"))
 
 ;; Do permit creating per-user keychains
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to