Title: [148296] trunk/Source/WebKit2
Revision
148296
Author
a...@apple.com
Date
2013-04-12 12:14:21 -0700 (Fri, 12 Apr 2013)

Log Message

        <rdar://problem/13334446> [Mac] Tweak sandbox profile.

        Reviewed by Jessie Berlin.

        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit2/ChangeLog (148295 => 148296)


--- trunk/Source/WebKit2/ChangeLog	2013-04-12 19:09:23 UTC (rev 148295)
+++ trunk/Source/WebKit2/ChangeLog	2013-04-12 19:14:21 UTC (rev 148296)
@@ -1,3 +1,11 @@
+2013-04-12  Alexey Proskuryakov  <a...@apple.com>
+
+        <rdar://problem/13334446> [Mac] Tweak sandbox profile.
+
+        Reviewed by Jessie Berlin.
+
+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+
 2013-04-12  Carlos Garcia Campos  <cgar...@igalia.com>
 
         [GTK] Split GtkAuthenticationDialog in two widgets

Modified: trunk/Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (148295 => 148296)


--- trunk/Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2013-04-12 19:09:23 UTC (rev 148295)
+++ trunk/Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2013-04-12 19:14:21 UTC (rev 148296)
@@ -1,6 +1,6 @@
 (version 1)
 (deny default (with partial-symbolication))
-(allow ipc-posix-shm system-audit file-read-metadata)
+(allow system-audit file-read-metadata)
 
 (import "system.sb")
 
@@ -78,6 +78,14 @@
 (allow iokit-open
     (iokit-user-client-class "RootDomainUserClient"))
 
+;; Shared memory.
+(allow ipc-posix-shm-read-data
+    (ipc-posix-name "com.apple.AppleDatabaseChanged")
+    (ipc-posix-name "FNetwork.defaultStorageSession")
+    (ipc-posix-name-regex #"^apple\.Safari\.PrivateBrowsing\-"))
+(allow ipc-posix-shm-write-data
+    (ipc-posix-name "com.apple.AppleDatabaseChanged"))
+
 ;; Various services required by CFNetwork and other frameworks
 (allow mach-lookup
     (global-name "com.apple.PowerManagement.control")
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to