Title: [294824] trunk/Source/WebKit/Scripts/process-entitlements.sh
Revision
294824
Author
pvol...@apple.com
Date
2022-05-25 14:38:32 -0700 (Wed, 25 May 2022)

Log Message

[iOS] WebContent captive portal XPC service needs entitlement to set sandbox state variables
https://bugs.webkit.org/show_bug.cgi?id=240921

Reviewed by Geoffrey Garen.

This patch also adds a function for the shared WebContent entitlements on iOS.

* Source/WebKit/Scripts/process-entitlements.sh:

Canonical link: https://commits.webkit.org/250976@main

Modified Paths

Diff

Modified: trunk/Source/WebKit/Scripts/process-entitlements.sh (294823 => 294824)


--- trunk/Source/WebKit/Scripts/process-entitlements.sh	2022-05-25 21:36:01 UTC (rev 294823)
+++ trunk/Source/WebKit/Scripts/process-entitlements.sh	2022-05-25 21:38:32 UTC (rev 294824)
@@ -307,7 +307,7 @@
 # iOS Family entitlements
 # ========================================
 
-function ios_family_process_webcontent_entitlements()
+function ios_family_process_webcontent_shared_entitlements()
 {
     plistbuddy Add :com.apple.QuartzCore.secure-mode bool YES
     plistbuddy Add :com.apple.QuartzCore.webkit-end-points bool YES
@@ -322,7 +322,6 @@
     plistbuddy Add :com.apple.private.memorystatus bool YES
     plistbuddy Add :com.apple.private.network.socket-delegate bool YES
     plistbuddy Add :com.apple.private.pac.exception bool YES
-    plistbuddy Add :com.apple.private.verified-jit bool YES
     plistbuddy Add :com.apple.private.security.message-filter bool YES
     plistbuddy Add :com.apple.private.security.mutable-state-flags array
     plistbuddy Add :com.apple.private.security.mutable-state-flags:0 string EnableMachBootstrap
@@ -330,36 +329,23 @@
     plistbuddy Add :com.apple.private.webinspector.proxy-application bool YES
     plistbuddy Add :com.apple.private.webkit.use-xpc-endpoint bool YES
     plistbuddy Add :com.apple.runningboard.assertions.webkit bool YES
-    plistbuddy Add :dynamic-codesigning bool YES
-
     plistbuddy Add :com.apple.tcc.delegated-services array
     plistbuddy Add :com.apple.tcc.delegated-services:0 string kTCCServiceCamera
     plistbuddy Add :com.apple.tcc.delegated-services:1 string kTCCServiceMicrophone
-
     plistbuddy Add :com.apple.private.sandbox.profile string com.apple.WebKit.WebContent
 }
 
+function ios_family_process_webcontent_entitlements()
+{
+    plistbuddy Add :com.apple.private.verified-jit bool YES
+    plistbuddy Add :dynamic-codesigning bool YES
+
+    ios_family_process_webcontent_shared_entitlements
+}
+
 function ios_family_process_webcontent_captiveportal_entitlements()
 {
-    plistbuddy Add :com.apple.QuartzCore.secure-mode bool YES
-    plistbuddy Add :com.apple.QuartzCore.webkit-end-points bool YES
-    plistbuddy add :com.apple.QuartzCore.webkit-limited-types bool YES
-    plistbuddy Add :com.apple.developer.coremedia.allow-alternate-video-decoder-selection bool YES
     plistbuddy Add :com.apple.developer.kernel.extended-virtual-addressing bool YES
-    plistbuddy Add :com.apple.mediaremote.set-playback-state bool YES
-    plistbuddy Add :com.apple.pac.shared_region_id string WebContent
-    plistbuddy Add :com.apple.private.allow-explicit-graphics-priority bool YES
-    plistbuddy Add :com.apple.private.coremedia.extensions.audiorecording.allow bool YES
-    plistbuddy Add :com.apple.private.coremedia.pidinheritance.allow bool YES
-    plistbuddy Add :com.apple.private.gpu-restricted bool YES
-    plistbuddy Add :com.apple.private.memorystatus bool YES
-    plistbuddy Add :com.apple.private.network.socket-delegate bool YES
-    plistbuddy Add :com.apple.private.pac.exception bool YES
-    plistbuddy Add :com.apple.private.security.message-filter bool YES
-    plistbuddy Add :com.apple.private.webinspector.allow-remote-inspection bool YES
-    plistbuddy Add :com.apple.private.webinspector.proxy-application bool YES
-    plistbuddy Add :com.apple.private.webkit.use-xpc-endpoint bool YES
-    plistbuddy Add :com.apple.runningboard.assertions.webkit bool YES
 
     plistbuddy Add :com.apple.imageio.allowabletypes array
     plistbuddy Add :com.apple.imageio.allowabletypes:0 string org.webmproject.webp
@@ -367,11 +353,7 @@
     plistbuddy Add :com.apple.imageio.allowabletypes:2 string public.png
     plistbuddy Add :com.apple.imageio.allowabletypes:3 string com.compuserve.gif
 
-    plistbuddy Add :com.apple.tcc.delegated-services array
-    plistbuddy Add :com.apple.tcc.delegated-services:0 string kTCCServiceCamera
-    plistbuddy Add :com.apple.tcc.delegated-services:1 string kTCCServiceMicrophone
-
-    plistbuddy Add :com.apple.private.sandbox.profile string com.apple.WebKit.WebContent
+    ios_family_process_webcontent_shared_entitlements
 }
 
 function ios_family_process_gpu_entitlements()
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to