Changeset 271286 in webkit

Timestamp:

Jan 7, 2021, 11:12:09 PM (6 years ago)

Author:

pvollan@apple.com

Message:

[iOS] Silence diagnostics sandbox violations
​https://bugs.webkit.org/show_bug.cgi?id=220414

Reviewed by Darin Adler.

For performance reasons, silence benign diagnostics sandbox violations in the WebContent process on iOS.
Additionally, remove logging for a sysctl in the Networking process' sandbox, since it is known to be used.

• Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb (modified) (2 diffs)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (modified) (1 diff)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2021-01-07  Per Arne Vollan  <pvollan@apple.com>
+
+        [iOS] Silence diagnostics sandbox violations
+        https://bugs.webkit.org/show_bug.cgi?id=220414
+
+        Reviewed by Darin Adler.
+
+        For performance reasons, silence benign diagnostics sandbox violations in the WebContent process on iOS.
+        Additionally, remove logging for a sysctl in the Networking process' sandbox, since it is known to be used.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2021-01-07  Kate Cheney  <katherine_cheney@apple.com>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb

@@ -455 +455 @@
     (sysctl-name "hw.logicalcpu")
     (sysctl-name "hw.logicalcpu_max")
-    (sysctl-name "hw.memsize")
     (sysctl-name "hw.pagesize")
     (sysctl-name "hw.physicalcpu")
@@ -548 +547 @@
         "hw.ncpu"
         "hw.machine" ;; Needed by CFNetwork (CFURLProtocols)
+        "hw.memsize"
         "hw.model" ;; Needed for bundle loading
         "hw.pagesize_compat" ;; Needed by bmalloc

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

@@ -955 +955 @@
 (media-accessibility-support)
 
-(deny mach-lookup (with no-log)
+(deny mach-lookup (with no-report)
     (global-name "com.apple.SystemConfiguration.configd")
     (global-name "com.apple.aggregated")
+    (global-name "com.apple.diagnosticd")
     (global-name "com.apple.fontservicesd")
 )