Title: [289069] trunk/Source/WebKit
Revision
289069
Author
pvol...@apple.com
Date
2022-02-03 12:50:16 -0800 (Thu, 03 Feb 2022)

Log Message

[iOS][WP] Enable sandbox state rules for Mach messages
https://bugs.webkit.org/show_bug.cgi?id=236027
<rdar://problem/88387937>

Reviewed by Brent Fulgham.

After <rdar://85931614> has been fixed, we can enable sandbox state rules for Mach messages.

* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (289068 => 289069)


--- trunk/Source/WebKit/ChangeLog	2022-02-03 20:29:54 UTC (rev 289068)
+++ trunk/Source/WebKit/ChangeLog	2022-02-03 20:50:16 UTC (rev 289069)
@@ -1,3 +1,15 @@
+2022-02-03  Per Arne Vollan  <pvol...@apple.com>
+
+        [iOS][WP] Enable sandbox state rules for Mach messages
+        https://bugs.webkit.org/show_bug.cgi?id=236027
+        <rdar://problem/88387937>
+
+        Reviewed by Brent Fulgham.
+
+        After <rdar://85931614> has been fixed, we can enable sandbox state rules for Mach messages.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+
 2022-02-03  Chris Dumez  <cdu...@apple.com>
 
         Rename NetworkConnectionToWebProcess::serverToContextConnectionNoLongerNeeded()

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (289068 => 289069)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in	2022-02-03 20:29:54 UTC (rev 289068)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in	2022-02-03 20:50:16 UTC (rev 289069)
@@ -1645,16 +1645,15 @@
 #endif
 
 #if HAVE(SANDBOX_STATE_FLAGS)
-;; FIXME: enable this when rdar://85931614 is fixed
-;;            (with-filter (require-not (state-flag "WebContentProcessLaunched"))
-;;                (allow mach-message-send
-;;                    (kernel-mig-routine-only-in-use-during-launch)))
-;;            (with-filter (state-flag "WebContentProcessLaunched")
-;;                (allow mach-message-send
-;;                    (with report)
-;;                    (with telemetry)
-;;                    (with message "kernel mig routine used after launch")
-;;                    (kernel-mig-routine-only-in-use-during-launch)))
+            (with-filter (require-not (state-flag "WebContentProcessLaunched"))
+                (allow mach-message-send
+                    (kernel-mig-routine-only-in-use-during-launch)))
+            (with-filter (state-flag "WebContentProcessLaunched")
+                (allow mach-message-send
+                    (with report)
+                    (with telemetry)
+                    (with message "kernel mig routine used after launch")
+                    (kernel-mig-routine-only-in-use-during-launch)))
 #endif
 
             (when (defined? 'mach_port_is_connection_for_service)
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to