Changeset 259812 in webkit

Timestamp:

Apr 9, 2020, 12:20:53 PM (6 years ago)

Author:

pvollan@apple.com

Message:

[iOS] Add routines to message filter in the WebContent sandbox
​https://bugs.webkit.org/show_bug.cgi?id=210293

Reviewed by Geoffrey Garen.

Add required routines to the message filter in the WebContent process. This set of routines was compiled
from local testing, and is therefore probably not the complete set.

• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (modified) (2 diffs)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2020-04-09  Per Arne Vollan  <pvollan@apple.com>
+
+        [iOS] Add routines to message filter in the WebContent sandbox
+        https://bugs.webkit.org/show_bug.cgi?id=210293
+
+        Reviewed by Geoffrey Garen.
+
+        Add required routines to the message filter in the WebContent process. This set of routines was compiled
+        from local testing, and is therefore probably not the complete set.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2020-04-09  Megan Gardner  <megan_gardner@apple.com>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

@@ -1114 +1114 @@
         (machtrap-number MSC_semaphore_wait_trap)
         (machtrap-number MSC_swtch_pri)
+        (machtrap-number MSC_syscall_thread_switch)
         (machtrap-number MSC_task_name_for_pid)
         (machtrap-number MSC_thread_get_special_reply_port)
@@ -1124 +1125 @@
         (apply-message-filter
             (allow mach-message-send (with report) (with telemetry))
+            (allow mach-message-send (kernel-mig-routine
+                _mach_make_memory_entry
+                host_get_io_master
+                host_info
+                host_request_notification
+                io_connect_async_method
+                io_connect_method
+                io_connect_set_notification_port_64
+                io_iterator_next
+                io_registry_entry_from_path
+                io_registry_entry_get_property_bin_buf
+                io_registry_entry_get_property_bytes
+                io_registry_entry_get_registry_entry_id
+                io_server_version
+                io_service_get_matching_service_bin
+                io_service_get_matching_services_bin
+                io_service_open_extended
+                mach_port_get_context_from_user
+                mach_port_set_attributes
+                mach_vm_copy
+                mach_vm_map_external
+                mach_vm_remap_external
+                semaphore_create
+                semaphore_destroy
+                task_get_special_port_from_user
+                task_info_from_user
+                task_restartable_ranges_synchronize
+                thread_get_state_to_user
+                thread_info
+                thread_policy
+                thread_policy_set
+                thread_resume
+                thread_set_exception_ports
+                thread_suspend
+                )
+            )
         )
     )