Changeset 278952 in webkit


Ignore:
Timestamp:
Jun 16, 2021 1:12:00 PM (3 years ago)
Author:
Brent Fulgham
Message:

Sandbox profiles need to allow loading from /usr/appleinternal/lib on internal builds
​https://bugs.webkit.org/show_bug.cgi?id=227079
<rdar://problem/79390957>

Reviewed by Per Arne Vollan.

We allow the specific directory "/usr/appleinternal/lib/sanitizers", but we actually need
access to "/usr/appleinternal/lib" in certain development environments.

  • GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
  • NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
  • Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb:
  • Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
  • Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb:
  • Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
  • WebAuthnProcess/mac/com.apple.WebKit.WebAuthnProcess.sb.in:
  • WebProcess/com.apple.WebProcess.sb.in:
Location:
trunk/Source/WebKit
Files:
9 edited

Legend:

Unmodified
Added
Removed

  • trunk/Source/WebKit/ChangeLog

    r278941 r278952  
     12021-06-16  Brent Fulgham  <bfulgham@apple.com>
     2
     3        Sandbox profiles need to allow loading from /usr/appleinternal/lib on internal builds
     4        https://bugs.webkit.org/show_bug.cgi?id=227079
     5        <rdar://problem/79390957>
     6
     7        Reviewed by Per Arne Vollan.
     8
     9        We allow the specific directory "/usr/appleinternal/lib/sanitizers", but we actually need
     10        access to "/usr/appleinternal/lib" in certain development environments.       
     11
     12        * GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
     13        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
     14        * Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb:
     15        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
     16        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb:
     17        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
     18        * WebAuthnProcess/mac/com.apple.WebKit.WebAuthnProcess.sb.in:
     19        * WebProcess/com.apple.WebProcess.sb.in:
     20
    1212021-06-16  Alex Christensen  <achristensen@webkit.org>
    222

  • trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in

    r277907 r278952  
    6060    (subpath "/System/Library/PrivateFrameworks")
    6161    (subpath "/usr/lib")
    62     (subpath "/usr/appleinternal/lib/sanitizers"))
     62    (subpath "/usr/appleinternal/lib") ;; <rdar://problem/72317112>
     63)
    6364
    6465(allow file-read-metadata

  • trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in

    r277907 r278952  
    4747       (subpath "/usr/lib")
    4848       (subpath "/usr/local/lib/sanitizers") ;; FIXME(209820)
    49        (subpath "/usr/appleinternal/lib/sanitizers"))
     49       (subpath "/usr/appleinternal/lib") ;; <rdar://problem/72317112>
     50)
    5051
    5152(allow file-read-metadata
    … …  
    9091(allow file-read*
    9192       (subpath "/usr/local/lib/sanitizers") ;; FIXME(209820)
    92        (subpath "/usr/appleinternal/lib/sanitizers"))
     93       (subpath "/usr/appleinternal/lib") ;; <rdar://problem/72317112>
     94)
    9395
    9496(allow file-write-create

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb

    r278881 r278952  
    316316            ;; <rdar://problem/8565035>
    317317            ;; <rdar://problem/23857452>
     318            ;; <rdar://problem/72317112>
    318319            (allow file-read* file-map-executable
    319320                   (subpath "/AppleInternal")
    320321                   (subpath "/usr/local/lib")
    321                    (subpath "/usr/appleinternal/lib/sanitizers")))
     322                   (subpath "/usr/appleinternal/lib")))
    322323            (with-elevated-precedence
    323324                (allow file-read* file-map-executable file-issue-extension

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb

    r277907 r278952  
    261261            ;; <rdar://problem/8565035>
    262262            ;; <rdar://problem/23857452>
     263            ;; <rdar://problem/72317112>
    263264            (allow file-read* file-map-executable
    264265                   (subpath "/AppleInternal")
    265266                   (subpath "/usr/local/lib")
    266                    (subpath "/usr/appleinternal/lib/sanitizers")))
     267                   (subpath "/usr/appleinternal/lib")))
    267268            (with-elevated-precedence
    268269                (allow file-read* file-map-executable file-issue-extension

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb

    r278831 r278952  
    6363        ;; <rdar://problem/8565035>
    6464        ;; <rdar://problem/23857452>
     65        ;; <rdar://problem/72317112>
    6566        (allow file-read* file-map-executable
    6667            (subpath
    6768                "/AppleInternal"
    6869                "/usr/local/lib"
    69                 "/usr/appleinternal/lib/sanitizers"
     70                "/usr/appleinternal/lib"
    7071            )
    7172        )

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in

    r278881 r278952  
    355355            ;; <rdar://problem/8565035>
    356356            ;; <rdar://problem/23857452>
     357            ;; <rdar://problem/72317112>
    357358            (allow file-read* file-map-executable
    358359                   (subpath "/AppleInternal")
    359360                   (subpath "/usr/local/lib")
    360                    (subpath "/usr/appleinternal/lib/sanitizers")))
     361                   (subpath "/usr/appleinternal/lib")))
    361362            (with-elevated-precedence
    362363                (allow file-read* file-map-executable file-issue-extension

  • trunk/Source/WebKit/WebAuthnProcess/mac/com.apple.WebKit.WebAuthnProcess.sb.in

    r277907 r278952  
    6060    (subpath "/System/Library/PrivateFrameworks")
    6161    (subpath "/usr/lib")
    62     (subpath "/usr/appleinternal/lib/sanitizers"))
     62    (subpath "/usr/appleinternal/lib") ;; <rdar://problem/72317112>
     63)
    6364
    6465(allow file-read-metadata

  • trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

    r278929 r278952  
    6868    (subpath "/usr/lib")
    6969    (subpath "/usr/local/lib/sanitizers") ;; FIXME(209820)
    70     (subpath "/usr/appleinternal/lib/sanitizers"))
     70    (subpath "/usr/appleinternal/lib") ;; <rdar://problem/72317112>
     71
     72)
    7173
    7274(allow file-read-metadata
Note: See TracChangeset for help on using the changeset viewer.