Changeset 243511 in webkit

Timestamp:

Mar 26, 2019, 12:15:56 PM (7 years ago)

Author:

pvollan@apple.com

Message:

[macOS] Fix sandbox violations
​https://bugs.webkit.org/show_bug.cgi?id=196262
<rdar://problem/47738015>

Reviewed by Brent Fulgham.

Fix various observed sandbox violations.

• NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
• WebProcess/com.apple.WebProcess.sb.in:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (modified) (1 diff)
• WebProcess/com.apple.WebProcess.sb.in (modified) (3 diffs)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2019-03-26  Per Arne Vollan  <pvollan@apple.com>
+
+        [macOS] Fix sandbox violations
+        https://bugs.webkit.org/show_bug.cgi?id=196262
+        <rdar://problem/47738015>
+
+        Reviewed by Brent Fulgham.
+
+        Fix various observed sandbox violations.
+
+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2019-03-26  Tomoki Imai  <Tomoki.Imai@sony.com>
 

trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in

@@ -239 +239 @@
     (literal "/private/etc/krb5.conf")
     (literal "/private/etc/services")
-    (literal "/private/etc/host")
+    (literal "/private/etc/hosts")
     (subpath "/Library/KerberosPlugins/GSSAPI")
     (subpath "/Library/KerberosPlugins/KerberosFrameworkPlugins"))

trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

@@ -165 +165 @@
         "hw.ncpu"
         "hw.vectorunit"
+        "kern.bootargs" ;; <rdar://problem/47738015>
         "kern.hostname"
         "kern.maxfilesperproc"
@@ -184 +185 @@
 (deny iokit-get-properties)
 (allow iokit-get-properties
+    (iokit-property "AAPL,LCD-PowerState-ON") ;; <rdar://problem/47738015>
     (iokit-property "AGCInfo")
     (iokit-property-regex #"^Accel(Caps|NativeDMARowByteAlignment)")
@@ -199 +201 @@
     (iokit-property-regex #"^CEA(ModeID|PixelRepetition)")
     (iokit-property "CFBundleIdentifier")
+    (iokit-property "CFBundleIdentifierKernel") ;; <rdar://problem/47738015>
     (iokit-property "CapsLockDelay")
     (iokit-property "CaseSensitive")