Changeset 284864 in webkit

Timestamp:

Oct 26, 2021, 7:28:58 AM (5 years ago)

Author:

pvollan@apple.com

Message:

[iOS][WP] Reduce sandbox telemetry
​https://bugs.webkit.org/show_bug.cgi?id=232279
<rdar://problem/84634347>

Reviewed by Brent Fulgham.

Reduce sandbox telemetry for rules we already have collected information for.

• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (modified) (4 diffs)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2021-10-26  Per Arne  <pvollan@apple.com>
+
+        [iOS][WP] Reduce sandbox telemetry
+        https://bugs.webkit.org/show_bug.cgi?id=232279
+        <rdar://problem/84634347>
+
+        Reviewed by Brent Fulgham.
+
+        Reduce sandbox telemetry for rules we already have collected information for.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+
 2021-10-26  Youenn Fablet  <youenn@apple.com>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in

@@ -1272 +1272 @@
         (syscall-number SYS_workq_kernreturn)
         (syscall-number SYS_workq_open))
-    
+
+    (allow syscall-unix (with telemetry)
+        (syscall-number SYS_objc_bp_assist_cfg_np))
+
     (allow syscall-unix (with telemetry-backtrace)
         (syscall-number SYS___pthread_kill)
@@ -1310 +1313 @@
         (syscall-number SYS_necp_client_action)
         (syscall-number SYS_necp_open)
-        (syscall-number SYS_objc_bp_assist_cfg_np)
         (syscall-number SYS_open)
         (syscall-number SYS_open_dprotected_np)
@@ -1393 +1395 @@
         (fcntl-command F_SETNOSIGPIPE)) ;; CMCapture uses when camera is enabled
 
-    (allow system-fcntl (with telemetry-backtrace)
+    (allow system-fcntl (with telemetry)
         (fcntl-command F_OFD_SETLK))
 
@@ -1542 +1544 @@
                 task_set_exc_guard_behavior
                 task_threads_from_user
-                thread_info
                 thread_policy
-                thread_policy_set
                 (when (defined? 'vm_copy) vm_copy)
                 (when (defined? 'vm_remap_external) vm_remap_external)))
+
+            (allow mach-message-send (with telemetry) (kernel-mig-routine
+                thread_info
+                thread_policy_set))
 
             (allow mach-message-send (kernel-mig-routine