Title: [243511] trunk/Source/WebKit
Revision
243511
Author
pvol...@apple.com
Date
2019-03-26 12:15:56 -0700 (Tue, 26 Mar 2019)

Log Message

[macOS] Fix sandbox violations
https://bugs.webkit.org/show_bug.cgi?id=196262
<rdar://problem/47738015>

Reviewed by Brent Fulgham.

Fix various observed sandbox violations.

* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
* WebProcess/com.apple.WebProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (243510 => 243511)


--- trunk/Source/WebKit/ChangeLog	2019-03-26 19:04:37 UTC (rev 243510)
+++ trunk/Source/WebKit/ChangeLog	2019-03-26 19:15:56 UTC (rev 243511)
@@ -1,3 +1,16 @@
+2019-03-26  Per Arne Vollan  <pvol...@apple.com>
+
+        [macOS] Fix sandbox violations
+        https://bugs.webkit.org/show_bug.cgi?id=196262
+        <rdar://problem/47738015>
+
+        Reviewed by Brent Fulgham.
+
+        Fix various observed sandbox violations.
+
+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2019-03-26  Tomoki Imai  <tomoki.i...@sony.com>
 
         Assertion failure !isInAcceleratedCompositingMode() in DrawingAreaProxyCoordinatedGraphics::incorporateUpdate when forceCompositingMode is turned on

Modified: trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (243510 => 243511)


--- trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2019-03-26 19:04:37 UTC (rev 243510)
+++ trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2019-03-26 19:15:56 UTC (rev 243511)
@@ -238,7 +238,7 @@
 (allow file-read*
     (literal "/private/etc/krb5.conf")
     (literal "/private/etc/services")
-    (literal "/private/etc/host")
+    (literal "/private/etc/hosts")
     (subpath "/Library/KerberosPlugins/GSSAPI")
     (subpath "/Library/KerberosPlugins/KerberosFrameworkPlugins"))
 

Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (243510 => 243511)


--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2019-03-26 19:04:37 UTC (rev 243510)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2019-03-26 19:15:56 UTC (rev 243511)
@@ -164,6 +164,7 @@
         "hw.model"
         "hw.ncpu"
         "hw.vectorunit"
+        "kern.bootargs" ;; <rdar://problem/47738015>
         "kern.hostname"
         "kern.maxfilesperproc"
         "kern.memorystatus_level"
@@ -183,6 +184,7 @@
 
 (deny iokit-get-properties)
 (allow iokit-get-properties
+    (iokit-property "AAPL,LCD-PowerState-ON") ;; <rdar://problem/47738015>
     (iokit-property "AGCInfo")
     (iokit-property-regex #"^Accel(Caps|NativeDMARowByteAlignment)")
     (iokit-property-regex #"^(Accurate|Extended)MaxDigitizerPressureValue")
@@ -198,6 +200,7 @@
     (iokit-property "BlockSize")
     (iokit-property-regex #"^CEA(ModeID|PixelRepetition)")
     (iokit-property "CFBundleIdentifier")
+    (iokit-property "CFBundleIdentifierKernel") ;; <rdar://problem/47738015>
     (iokit-property "CapsLockDelay")
     (iokit-property "CaseSensitive")
     (iokit-property "ConfigState")
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to