Changeset 285959 in webkit

Timestamp:

Nov 17, 2021, 3:12:54 PM (5 years ago)

Author:

pvollan@apple.com

Message:

[macOS] Add message filter guard in the GPU process' sandbox
​https://bugs.webkit.org/show_bug.cgi?id=233282
<rdar://85514428>

Reviewed by Brent Fulgham.

Add message filter guard in the GPU process' sandbox.

• GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in (modified) (2 diffs)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2021-11-17  Per Arne Vollan  <pvollan@apple.com>
+
+        [macOS] Add message filter guard in the GPU process' sandbox
+        https://bugs.webkit.org/show_bug.cgi?id=233282
+        <rdar://85514428>
+
+        Reviewed by Brent Fulgham.
+
+        Add message filter guard in the GPU process' sandbox.
+
+        * GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
+
 2021-11-17  Tim Horton  <timothy_horton@apple.com>
 

trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in

@@ -857 +857 @@
 )
 
+#if HAVE(SANDBOX_MESSAGE_FILTERING)
 (when (and (equal? (param "ENABLE_SANDBOX_MESSAGE_FILTER") "YES") (defined? 'mach-kernel-endpoint))
     (allow mach-kernel-endpoint
@@ -891 +892 @@
         MSC_syscall_thread_switch
         MSC_thread_get_special_reply_port)))
+#endif // HAVE(SANDBOX_MESSAGE_FILTERING)
 
 (when (defined? 'syscall-unix)