Title: [258456] trunk/Source/WebKit
Revision
258456
Author
bfulg...@apple.com
Date
2020-03-13 18:43:54 -0700 (Fri, 13 Mar 2020)

Log Message

Clean up sandbox violations found during testing
https://bugs.webkit.org/show_bug.cgi?id=209096
<rdar://problem/59931477>

Reviewed by Geoffrey Garen.

Remove telemetry from some items, and allow access to some IOKit properties
needed for media playback on macOS and iOS.

* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
* WebProcess/com.apple.WebProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (258455 => 258456)


--- trunk/Source/WebKit/ChangeLog	2020-03-14 01:43:38 UTC (rev 258455)
+++ trunk/Source/WebKit/ChangeLog	2020-03-14 01:43:54 UTC (rev 258456)
@@ -1,3 +1,17 @@
+2020-03-13  Brent Fulgham  <bfulg...@apple.com>
+
+        Clean up sandbox violations found during testing
+        https://bugs.webkit.org/show_bug.cgi?id=209096
+        <rdar://problem/59931477>
+
+        Reviewed by Geoffrey Garen.
+
+        Remove telemetry from some items, and allow access to some IOKit properties
+        needed for media playback on macOS and iOS.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2020-03-13  Chris Dumez  <cdu...@apple.com>
 
         Unreviewed, drop unused variable in WebPageProxy::backForwardGoToItem().

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (258455 => 258456)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2020-03-14 01:43:38 UTC (rev 258455)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	2020-03-14 01:43:54 UTC (rev 258456)
@@ -741,6 +741,7 @@
         "kern.osvariant_status"
         "kern.secure_kernel" ;; Needed by XPC bundle resolution
         "kern.version"
+        "sysctl.name2oid"
         "vm.footprint_suspend")
     (sysctl-name-regex #"^net.routetable") ;; <rdar://problem/57665153>
 )
@@ -777,6 +778,7 @@
     (iokit-property "dfr")
     (iokit-property "display-corner-radius") ;; <rdar://problem/50602737>
     (iokit-property "emu")
+    (iokit-property "external")
     (iokit-property "graphics-featureset-class") ;; <rdar://problem/49497720>
     (iokit-property "graphics-featureset-fallbacks") ;; <rdar://problem/51322072>
     (iokit-property "hdcp-hoover-protocol")

Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (258455 => 258456)


--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2020-03-14 01:43:38 UTC (rev 258455)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2020-03-14 01:43:54 UTC (rev 258456)
@@ -570,7 +570,6 @@
     (with report) (with telemetry)
 #endif
     (iokit-user-client-class "AppleMultitouchDeviceUserClient")
-    (iokit-user-client-class "AppleUpstreamUserClient")
     (iokit-user-client-class "IOHIDParamUserClient")
     (iokit-user-client-class "IOAudioControlUserClient")
     (iokit-user-client-class "IOAudioEngineUserClient")
@@ -578,6 +577,7 @@
     (iokit-user-client-class "AudioAUUC"))
 
 (allow iokit-open
+    (iokit-user-client-class "AppleUpstreamUserClient")
     (iokit-user-client-class "RootDomainUserClient") ;; Needed by WebCore::PerformanceMonitor
 )
 
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to