Title: [272149] trunk/Source/WebKit
- Revision
- 272149
- Author
- [email protected]
- Date
- 2021-02-01 10:11:42 -0800 (Mon, 01 Feb 2021)
Log Message
[macOS] Remove write access to some IOKit properties
https://bugs.webkit.org/show_bug.cgi?id=221137
<rdar://problem/73473658>
Reviewed by Brent Fulgham.
Remove write access to some IOKit properties in the WebContent process' sandbox.
* WebProcess/com.apple.WebProcess.sb.in:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (272148 => 272149)
--- trunk/Source/WebKit/ChangeLog 2021-02-01 18:08:52 UTC (rev 272148)
+++ trunk/Source/WebKit/ChangeLog 2021-02-01 18:11:42 UTC (rev 272149)
@@ -1,5 +1,17 @@
2021-02-01 Per Arne <[email protected]>
+ [macOS] Remove write access to some IOKit properties
+ https://bugs.webkit.org/show_bug.cgi?id=221137
+ <rdar://problem/73473658>
+
+ Reviewed by Brent Fulgham.
+
+ Remove write access to some IOKit properties in the WebContent process' sandbox.
+
+ * WebProcess/com.apple.WebProcess.sb.in:
+
+2021-02-01 Per Arne <[email protected]>
+
[macOS] Add reporting to mach-register sandbox rule
https://bugs.webkit.org/show_bug.cgi?id=221139
<rdar://problem/70350150>
Modified: trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (272148 => 272149)
--- trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2021-02-01 18:08:52 UTC (rev 272148)
+++ trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in 2021-02-01 18:11:42 UTC (rev 272149)
@@ -364,15 +364,7 @@
;; GPU bundles
(allow file-read*
(subpath "/Library/GPUBundles"))
- ;; DisplayServices
- (allow iokit-set-properties
- (require-all (iokit-connection "IODisplay")
- (require-any (iokit-property "brightness")
- (iokit-property "linear-brightness")
- (iokit-property "commit")
- (iokit-property "rgcs")
- (iokit-property "ggcs")
- (iokit-property "bgcs")))))
+)
;;;
;;; End rules originally copied from 'system.sb'
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
