Changeset 269163 in webkit

Timestamp:

Oct 29, 2020, 1:23:45 PM (6 years ago)

Author:

pvollan@apple.com

Message:

[macOS] Add required entitlement for message filtering
​https://bugs.webkit.org/show_bug.cgi?id=218342
<rdar://problem/70810567>

Reviewed by Brent Fulgham.

The entitlement 'com.apple.private.security.message-filter' needs to be set to YES. This patch also
adds telemetry for mach-bootstrap filtering.

• Scripts/process-entitlements.sh:
• WebProcess/com.apple.WebProcess.sb.in:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Scripts/process-entitlements.sh (modified) (1 diff)
• WebProcess/com.apple.WebProcess.sb.in (modified) (1 diff)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2020-10-29  Per Arne Vollan  <pvollan@apple.com>
+
+        [macOS] Add required entitlement for message filtering
+        https://bugs.webkit.org/show_bug.cgi?id=218342
+        <rdar://problem/70810567>
+
+        Reviewed by Brent Fulgham.
+
+        The entitlement 'com.apple.private.security.message-filter' needs to be set to YES. This patch also
+        adds telemetry for mach-bootstrap filtering.
+
+        * Scripts/process-entitlements.sh:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2020-10-29  Alex Christensen  <achristensen@webkit.org>
 

trunk/Source/WebKit/Scripts/process-entitlements.sh

@@ -23 +23 @@
             plistbuddy Add :com.apple.pac.shared_region_id string WebContent
             plistbuddy Add :com.apple.private.pac.exception bool YES
+            plistbuddy Add :com.apple.private.security.message-filter bool YES
         fi
     fi

trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

@@ -1228 +1228 @@
 #endif
 
+(when (defined? 'mach-bootstrap)
+    (allow mach-bootstrap
+        (apply-message-filter
+            (allow xpc-message-send (with telemetry))
+            (allow xpc-message-send (with telemetry) (message-number 206))
+        )
+    )
+)
+
 (when (defined? 'mach-kernel-endpoint)
     (allow mach-kernel-endpoint