Title: [287594] branches/safari-613.1.12.1-branch/Source/WebKit
Revision
287594
Author
repst...@apple.com
Date
2022-01-04 15:49:24 -0800 (Tue, 04 Jan 2022)

Log Message

Cherry-pick r287413. rdar://problem/86808395

    Allow a necessary syscall in the WebContent sandbox
    https://bugs.webkit.org/show_bug.cgi?id=234641
    <rdar://problem/86808395>

    Reviewed by Alan Bujtas.

    Telemetry and testing logs indicate that we need to allow
    'SYS_memorystatus_control' in our WebContent sandbox.

    We allow this in all other sandboxes, so this was likely an oversight.

    * WebProcess/com.apple.WebProcess.sb.in:

    git-svn-id: https://svn.webkit.org/repository/webkit/trunk@287413 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Modified Paths

Diff

Modified: branches/safari-613.1.12.1-branch/Source/WebKit/ChangeLog (287593 => 287594)


--- branches/safari-613.1.12.1-branch/Source/WebKit/ChangeLog	2022-01-04 23:48:08 UTC (rev 287593)
+++ branches/safari-613.1.12.1-branch/Source/WebKit/ChangeLog	2022-01-04 23:49:24 UTC (rev 287594)
@@ -1,5 +1,40 @@
 2022-01-04  Alan Coon  <alanc...@apple.com>
 
+        Cherry-pick r287413. rdar://problem/86808395
+
+    Allow a necessary syscall in the WebContent sandbox
+    https://bugs.webkit.org/show_bug.cgi?id=234641
+    <rdar://problem/86808395>
+    
+    Reviewed by Alan Bujtas.
+    
+    Telemetry and testing logs indicate that we need to allow
+    'SYS_memorystatus_control' in our WebContent sandbox.
+    
+    We allow this in all other sandboxes, so this was likely an oversight.
+    
+    * WebProcess/com.apple.WebProcess.sb.in:
+    
+    
+    git-svn-id: https://svn.webkit.org/repository/webkit/trunk@287413 268f45cc-cd09-0410-ab3c-d52691b4dbfc
+
+    2021-12-23  Brent Fulgham  <bfulg...@apple.com>
+
+            Allow a necessary syscall in the WebContent sandbox
+            https://bugs.webkit.org/show_bug.cgi?id=234641
+            <rdar://problem/86808395>
+
+            Reviewed by Alan Bujtas.
+
+            Telemetry and testing logs indicate that we need to allow
+            'SYS_memorystatus_control' in our WebContent sandbox.
+
+            We allow this in all other sandboxes, so this was likely an oversight.
+
+            * WebProcess/com.apple.WebProcess.sb.in:
+
+2022-01-04  Alan Coon  <alanc...@apple.com>
+
         Cherry-pick r287574. rdar://problem/86855896
 
     [Cocoa] Hang in AVTrackPrivateAVFObjCImpl::bitrate()

Modified: branches/safari-613.1.12.1-branch/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in (287593 => 287594)


--- branches/safari-613.1.12.1-branch/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2022-01-04 23:48:08 UTC (rev 287593)
+++ branches/safari-613.1.12.1-branch/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	2022-01-04 23:49:24 UTC (rev 287594)
@@ -1945,6 +1945,7 @@
         SYS_lseek
         SYS_lstat64
         SYS_madvise
+        SYS_memorystatus_control
         SYS_mincore
         SYS_mkdir
         SYS_mmap
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to