Changeset 271198 in webkit

Timestamp:

Jan 6, 2021, 2:37:42 AM (6 years ago)

Author:

pvollan@apple.com

Message:

[iOS] Silence selected sandbox violation reports
​https://bugs.webkit.org/show_bug.cgi?id=220320

Reviewed by Darin Adler.

For performance reasons, benign sandbox violations in the WebContent process can be silenced on iOS.

• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (modified) (2 diffs)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2021-01-06  Per Arne Vollan  <pvollan@apple.com>
+
+        [iOS] Silence selected sandbox violation reports
+        https://bugs.webkit.org/show_bug.cgi?id=220320
+
+        Reviewed by Darin Adler.
+
+        For performance reasons, benign sandbox violations in the WebContent process can be silenced on iOS.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2021-01-06  Per Arne Vollan  <pvollan@apple.com>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

@@ -825 +825 @@
         "/Library/Preferences/com.apple.voiceservices.plist"
         "/Library/Preferences/com.apple.voiceservices.logging.plist"
+    )
+)
+
+(deny file-read* (with no-report)
+    (home-literal
+        "/Library/Preferences/com.apple.WebKit.WebContent.plist"
     )
 )
@@ -950 +956 @@
 
 (deny mach-lookup (with no-log)
-    (global-name "com.apple.fontservicesd"))
+    (global-name "com.apple.SystemConfiguration.configd")
+    (global-name "com.apple.aggregated")
+    (global-name "com.apple.fontservicesd")
+)
 
 (deny mach-lookup (with telemetry-backtrace)