⚠ Archived content — this site is no longer maintained.   Current WebKit documentation is at docs.webkit.org.

Changeset 286003 in webkit


Ignore:
Timestamp:
Nov 18, 2021, 7:52:42 AM (5 years ago)
Author:
pvollan@apple.com
Message:

[macOS] Block access to unused resources in the Networking process' sandbox
​https://bugs.webkit.org/show_bug.cgi?id=233086
<rdar://problem/85376544>

Reviewed by Brent Fulgham.

Based on telemetry, block access to unused resources in the Networking process' sandbox on macOS.

  • NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
Location:
trunk/Source/WebKit
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • trunk/Source/WebKit/ChangeLog

    r285996 r286003  
     12021-11-18  Per Arne Vollan  <pvollan@apple.com>
     2
     3        [macOS] Block access to unused resources in the Networking process' sandbox
     4        https://bugs.webkit.org/show_bug.cgi?id=233086
     5        <rdar://problem/85376544>
     6
     7        Reviewed by Brent Fulgham.
     8
     9        Based on telemetry, block access to unused resources in the Networking process' sandbox on macOS.
     10
     11        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
     12
    1132021-10-25  Carlos Garcia Campos  <cgarcia@igalia.com>
    214

  • trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in

    r285412 r286003  
    3939#include "Shared/Sandbox/preferences.sb"
    4040
     41;; Utility functions for home directory relative path filters
     42(define (home-regex home-relative-regex)
     43  (regex (string-append "^" (regex-quote (param "HOME_DIR")) home-relative-regex)))
     44
     45(define (home-subpath home-relative-subpath)
     46    (subpath (string-append (param "HOME_DIR") home-relative-subpath)))
     47
     48(define (home-literal home-relative-literal)
     49    (literal (string-append (param "HOME_DIR") home-relative-literal)))
     50
    4151#if PLATFORM(MAC)
    42 ;;;
    43 ;;; The following rules were originally contained in 'common.sb'. We are duplicating them here so we can
    44 ;;; remove unneeded sandbox extensions.
    45 ;;;
    46 
    47 (allow mach-register (with telemetry) (local-name-prefix ""))
    48 
    49 (allow mach-lookup (with telemetry) (xpc-service-name-prefix ""))
     52(deny mach-register (with telemetry) (local-name-prefix ""))
    5053
    5154(allow system-automount
    … …  
    5356
    5457(allow file-map-executable (with telemetry))
    55 (allow file-map-executable (with telemetry)
    56        (subpath "/Library/Apple/System/Library/Frameworks")
    57        (subpath "/Library/Apple/System/Library/PrivateFrameworks")
    58        (subpath "/System/Library/Frameworks")
    59        (subpath "/System/Library/PrivateFrameworks")
    60        (subpath "/usr/lib")
    61        (subpath "/usr/local/lib/sanitizers") ;; FIXME(209820)
    62        (subpath "/usr/appleinternal/lib") ;; <rdar://problem/72317112>
    63 )
     58(allow file-map-executable
     59    (home-subpath "/Library/Caches")
     60    (home-subpath "/Library/Containers")
     61    (subpath (param "DARWIN_USER_TEMP_DIR"))
     62    (subpath "/Library/KerberosPlugins")
     63    (subpath "/System/Library/Frameworks")
     64    (subpath "/System/Library/KerberosPlugins")
     65    (subpath "/System/Library/PrivateFrameworks")
     66    (subpath "/usr/lib"))
    6467
    6568(allow file-read-metadata
    66        (literal "/var"))
    67 (allow file-read-metadata (with telemetry)
    68        (literal "/etc")
    69        (literal "/tmp")
    70        (literal "/private/etc/localtime"))
     69    (literal "/etc")
     70    (literal "/tmp")
     71    (literal "/var")
     72    (literal "/private/etc/localtime"))
    7173
    7274(allow file-read-metadata (with telemetry) (path-ancestors "/System/Volumes/Data/private"))
    … …  
    7779       (subpath "/System"))
    7880
    79 (allow file-read* (with telemetry)
    80        (subpath "/Library/Apple/System")
    81        (subpath "/Library/Filesystems/NetFSPlugins")
     81(allow file-read*
    8282       (subpath "/Library/Preferences/Logging")      ; Logging Rethink
    8383#if __MAC_OS_X_VERSION_MIN_REQUIRED < 110000
    … …  
    8888       (subpath "/usr/share"))
    8989
    90 (allow file-read* (with telemetry)
    91        (literal "/dev/autofs_nowait")
    92        (literal "/dev/random")
     90(allow file-read*
    9391       (literal "/dev/urandom")
    9492       (literal "/private/etc/master.passwd")
    9593       (literal "/private/etc/passwd")
    96        (literal "/private/etc/protocols")
    9794       (literal "/private/etc/services"))
    9895
    99 (allow file-read* (with telemetry)
    100        file-write-data
    101        (literal "/dev/null")
    102        (literal "/dev/zero"))
    103 
    104 (allow file-read* (with telemetry)
    105        file-write-data
    106        file-ioctl
     96(allow file-read* file-write-data file-ioctl
    10797       (literal "/dev/dtracehelper"))
    10898
    109 (allow file-read* (with telemetry)
    110        (subpath "/usr/local/lib/sanitizers") ;; FIXME(209820)
    111        (subpath "/usr/appleinternal/lib") ;; <rdar://problem/72317112>
    112 )
    113 
    114 (allow file-write-create (with telemetry)
    115        (require-all (prefix "/cores/")
    116                     (vnode-type REGULAR-FILE)))
    117 
    118 (allow file-read* (with telemetry)
     99(allow file-read*
    119100       (require-all (subpath "/AppleInternal/Library/Preferences/Logging")
    120101                    (system-attribute apple-internal)))
    121102
    122 (allow file-read* file-map-executable (with telemetry)
    123        (require-all (subpath "/usr/local/lib/log")
    124                     (system-attribute apple-internal)))
    125 
    126 (allow network-outbound (with telemetry)
     103(allow network-outbound
    127104       (literal "/private/var/run/syslog"))
    128105
    129 (allow ipc-posix-shm-read* (with telemetry)
    130        (ipc-posix-name "apple.shm.notification_center")
    131        (ipc-posix-name-prefix "apple.cfprefs."))
    132 
    133 (allow mach-lookup (with telemetry)
     106(allow ipc-posix-shm-read*
     107    (ipc-posix-name "apple.shm.notification_center")
     108#if !ENABLE(CFPREFS_DIRECT_MODE)
     109    (ipc-posix-name-prefix "apple.cfprefs.")
     110#endif
     111)
     112
     113(allow mach-lookup
    134114       (global-name "com.apple.system.opendirectoryd.libinfo")
    135115       (global-name "com.apple.trustd.agent"))
    … …  
    139119       (global-name "com.apple.trustd")))
    140120
    141 (with-filter (system-attribute apple-internal)
    142     (allow mach-lookup (with telemetry) (global-name "com.apple.internal.objc_trace")))
    143 
    144121(define (system-network)
    145     (allow file-read* (with telemetry)
     122    (allow file-read*
    146123         (literal "/Library/Preferences/com.apple.networkd.plist")
    147124         (literal "/private/var/db/nsurlstoraged/dafsaData.bin"))
    148     (allow mach-lookup (with telemetry)
     125    (deny mach-lookup (with telemetry)
    149126         (global-name "com.apple.SystemConfiguration.PPPController")
    150127         (global-name "com.apple.SystemConfiguration.SCNetworkReachability")
     128         (global-name "com.apple.networkd")
     129         (global-name "com.apple.nsurlstorage-cache")
     130         (global-name "com.apple.symptomsd"))
     131    (allow mach-lookup
    151132         (global-name "com.apple.dnssd.service")
    152133         (global-name "com.apple.nehelper")
    153134         (global-name "com.apple.nesessionmanager")
    154          (global-name "com.apple.networkd")
    155          (global-name "com.apple.nsurlstorage-cache")
    156          (global-name "com.apple.symptomsd")
    157135         (global-name "com.apple.usymptomsd"))
    158     (allow network-outbound (with telemetry)
    159          (control-name "com.apple.netsrc")
    160          (control-name "com.apple.network.statistics"))
    161     (allow system-socket (with telemetry)
     136    (allow network-outbound
     137         (control-name "com.apple.netsrc"))
     138    (deny system-socket (with telemetry)
     139          (socket-domain AF_ROUTE))
     140    (allow system-socket
    162141         (require-all (socket-domain AF_SYSTEM)
    163                       (socket-protocol 2)) ; SYSPROTO_CONTROL
    164          (socket-domain AF_ROUTE))
    165     (allow mach-lookup (with telemetry)
     142                      (socket-protocol 2))) ; SYSPROTO_CONTROL
     143    (allow mach-lookup
    166144         (global-name "com.apple.AppSSO.service-xpc"))
    167     (allow ipc-posix-shm-read-data (with telemetry)
     145    (deny ipc-posix-shm-read-data (with telemetry)
    168146         (ipc-posix-name "/com.apple.AppSSO.version")))
    169 
    170 ;;;
    171 ;;; End rules originally copied from 'system.sb'
    172 ;;;
    173147#else
    174148(import "system.sb")
    … …  
    181155(allow process-info-setcontrol (target self))
    182156
    183 (deny sysctl*)
    184 (allow sysctl-read (with telemetry)
     157(deny sysctl* (with telemetry))
     158(allow sysctl-read
    185159    (sysctl-name
    186         "hw.activecpu" ;; <rdar://problem/56795575>
    187         "hw.availcpu"
    188         "hw.cacheconfig" ;; <rdar://problem/78213563>
    189         "hw.cachelinesize" ;; <rdar://problem/56795575>
    190         "hw.cachesize" ;; <rdar://problem/78213563>
    191         "hw.cpusubfamily"
    192         "hw.cputhreadtype"
    193         "hw.l1dcachesize" ;; <rdar://problem/56795575>
    194         "hw.l1icachesize" ;; <rdar://problem/56795575>
    195         "hw.l2cachesize" ;; <rdar://problem/56795575>
    196         "hw.l3cachesize" ;; <rdar://problem/56795575>
    197         "hw.logicalcpu" ;; <rdar://problem/56795575>
    198         "hw.logicalcpu_max" ;; <rdar://problem/56795575>
    199160        "hw.memsize"
    200         "hw.model" ;; Needed for bundle loading
    201161        "hw.ncpu"
    202         "hw.nperflevels" ;; <rdar://problem/76783596>
    203         "hw.pagesize" ;; <rdar://problem/76783596>
    204         "hw.pagesize_compat" ;; <rdar://problem/76783596>
    205         "hw.physicalcpu" ;; <rdar://problem/58416475>
    206         "hw.physicalcpu_max" ;; <rdar://problem/58416475>
    207         "hw.physmem" ;; <rdar://problem/76782530>
    208         "kern.hostname"
    209         "kern.hv_vmm_present"
    210162        "kern.maxfilesperproc"
    211         "kern.memorystatus_level"
    212163        "kern.osproductversion" ;; Needed by CFNetwork (HSTS store and others)
     164        "kern.ostype"
    213165        "kern.osversion" ;; Needed by WebKit and ASL logging.
    214166        "kern.tcsm_available" ;; Needed for IndexedDB support.
    215         "kern.tcsm_enable"
    216         "kern.ostype"
    217         "kern.version"
    218         "sysctl.name2oid"
    219         "vm.footprint_suspend")
     167        "kern.tcsm_enable")
    220168    (sysctl-name-prefix "kern.proc.pid.")
    221     (sysctl-name-prefix "net.routetable")
    222     (sysctl-name-prefix "hw.optional.") ;; <rdar://problem/71462790>
    223     (sysctl-name-prefix "hw.perflevel") ;; <rdar://problem/76783596>
    224 )
    225 
    226 (allow sysctl-write (with telemetry)
     169    (sysctl-name-prefix "net.routetable"))
     170
     171(allow sysctl-write
    227172    (sysctl-name
    228173        "kern.tcsm_enable"))
    … …  
    247192(deny mach-lookup (xpc-service-name-prefix ""))
    248193
    249 ;; Utility functions for home directory relative path filters
    250 (define (home-regex home-relative-regex)
    251   (regex (string-append "^" (regex-quote (param "HOME_DIR")) home-relative-regex)))
    252 
    253 (define (home-subpath home-relative-subpath)
    254     (subpath (string-append (param "HOME_DIR") home-relative-subpath)))
    255 
    256 (define (home-literal home-relative-literal)
    257     (literal (string-append (param "HOME_DIR") home-relative-literal)))
    258 
    259 ;; CFNetwork
    260 (allow file-read-data (with telemetry) (path "/private/var/db/nsurlstoraged/dafsaData.bin"))
    261 
    262194;; Remove when <rdar://problem/29646094> is fixed.
    263195(define (HEX-pattern-match-generator pattern-descriptor)
    … …  
    296228    "com.apple.networkConnect")
    297229
    298 (allow file-read* (with telemetry)
     230(allow file-read*
    299231    ;; Basic system paths
    300232    (subpath "/Library/Frameworks")
    301233    (subpath "/Library/Managed Preferences")
    302234
    303     ;; System and user preferences
    304     (regex #"^/Library/Managed Preferences/[^/]+/com\.apple\.networkConnect\.plist$")
    305 
    306235    ;; On-disk WebKit2 framework location, to account for debug installations
    307236    ;; outside of /System/Library/Frameworks
    308237    (subpath (param "WEBKIT2_FRAMEWORK_DIR")))
    309 (allow system-fsctl (with telemetry) (fsctl-command (_IO "h" 47)))
    310 
    311 (allow file-read-data (with telemetry)
     238
     239(allow file-read-data
    312240    (literal "/usr/local/lib/log") ; <rdar://problem/36629495>
    313241)
    … …  
    315243;; Sandbox extensions
    316244(define (apply-read-and-issue-extension op path-filter)
    317     (op file-read* (with telemetry) path-filter)
     245    (op file-read* path-filter)
    318246    (op file-issue-extension (require-all (extension-class "com.apple.app-sandbox.read") path-filter)))
    319247(define (apply-write-and-issue-extension op path-filter)
    320     (op file-write* (with telemetry) path-filter)
     248    (op file-write* path-filter)
    321249    (op file-issue-extension (require-all (extension-class "com.apple.app-sandbox.read-write") path-filter)))
    322250(define (read-only-and-issue-extensions path-filter)
    … …  
    328256(read-write-and-issue-extensions (extension "com.apple.app-sandbox.read-write"))
    329257
    330 (allow file-read* file-write* (with telemetry) (subpath (param "DARWIN_USER_CACHE_DIR")))
    331 
    332 (allow file-read* file-write* (with telemetry) (subpath (param "DARWIN_USER_TEMP_DIR")))
     258(allow file-read* file-write* (subpath (param "DARWIN_USER_CACHE_DIR")))
     259
     260(allow file-read* file-write* (subpath (param "DARWIN_USER_TEMP_DIR")))
    333261
    334262;; IOKit user clients
    335 (allow iokit-open (with telemetry)
     263(allow iokit-open
    336264    (iokit-user-client-class "RootDomainUserClient") ; Used by PowerObserver
    337265)
    338266
    339 ;; cookied.
    340 ;; FIXME: Update for <rdar://problem/13642852>.
    341 (allow ipc-posix-shm-read-data (with telemetry)
    342     (ipc-posix-name "FNetwork.defaultStorageSession")
    343     (ipc-posix-name-regex #"\.PrivateBrowsing-")
    344     (ipc-posix-name-prefix "^WebKit Test-")
    345     (ipc-posix-name "/com.apple.AppSSO.version")
    346 )
     267(deny mach-lookup (with telemetry)
     268    (global-name "com.apple.PowerManagement.control"))
    347269
    348270;; Various services required by CFNetwork and other frameworks
    349 (allow mach-lookup (with telemetry)
     271(allow mach-lookup
    350272    (global-name "com.apple.FileCoordination")
    351     (global-name "com.apple.PowerManagement.control")
    352273    (global-name "com.apple.SystemConfiguration.configd")
    353     (global-name "com.apple.cookied")
    354274    (global-name "com.apple.cfnetwork.AuthBrokerAgent")
    355275    (global-name "com.apple.cfnetwork.cfnetworkagent")
     276#if __MAC_OS_X_VERSION_MIN_REQUIRED < 120000
     277    (global-name "com.apple.cookied")
     278#endif
    356279    (global-name "com.apple.ist.ds.appleconnect2.service.kdctunnelcontroller")
    357280    (global-name "com.apple.logd")
    … …  
    360283    (global-name "com.apple.nesessionmanager.flow-divert-token")
    361284    (global-name "com.apple.nesessionmanager.content-filter") ;; <rdar://problem/47598758>
    362     (global-name "com.apple.system.notification_center")
    363     (global-name "com.apple.AppSSO.service-xpc")
    364 )
     285    (global-name "com.apple.system.notification_center"))
    365286
    366287(with-filter (system-attribute apple-internal)
    … …  
    382303)
    383304
     305(deny mach-lookup (with telemetry)
     306   (global-name "com.apple.ctkd.token-client")
     307   (global-name "com.apple.securityd.xpc")
     308   (global-name "com.apple.CoreAuthentication.agent")
     309   (global-name "com.apple.ocspd"))
     310
    384311;; Security framework
    385 (allow mach-lookup (with telemetry)
    386        (global-name "com.apple.ctkd.token-client")
    387        (global-name "com.apple.securityd.xpc")
    388        (global-name "com.apple.CoreAuthentication.agent")
    389        (global-name "com.apple.ocspd")
    390        (global-name "com.apple.SecurityServer"))
     312(allow mach-lookup
     313    (global-name "com.apple.SecurityServer"))
    391314
    392315;; FIXME: This should be removed when <rdar://problem/10479685> is fixed.
    393316;; Restrict AppSandboxed processes from creating /Library/Keychains, but allow access to the contents of /Library/Keychains:
    394 (allow file-read-data file-read-metadata file-write* (with telemetry)
     317(allow file-read-data file-read-metadata
    395318    (subpath "/Library/Keychains")
    396319    (home-subpath "/Library/Keychains"))
    … …  
    401324    (home-regex (string-append "/Library/Keychains/" (uuid-regex-string) "(/|$)")))
    402325
    403 (allow file-read* (with telemetry) (subpath "/private/var/db/mds/system")) ;; FIXME: This should be removed when <rdar://problem/9538414> is fixed.
     326(allow file-read* (subpath "/private/var/db/mds/system")) ;; FIXME: This should be removed when <rdar://problem/9538414> is fixed.
    404327(with-filter (uid 0)
    405328    (allow file-write* (with telemetry)
    … …  
    413336    "com.apple.security.revocation")
    414337
    415 (allow file-read* (with telemetry)
     338(allow file-read*
    416339       (subpath "/private/var/db/mds")
    417        (literal "/private/var/db/DetachedSignatures")
    418340
    419341       ; The following are needed until the causes of <rdar://problem/41487786> are resolved.
    420342       (literal "/Library/Preferences/com.apple.security.plist")
    421        (literal "/Library/Preferences/com.apple.security.common.plist")
    422        (literal "/Library/Preferences/com.apple.security.revocation.plist")
    423        (home-literal "/Library/Application Support/SyncServices/Local/ClientsWithChanges/com.apple.Keychain")
    424343       (home-literal "/Library/Preferences/com.apple.security.plist")
    425        (home-literal "/Library/Preferences/com.apple.security.revocation.plist")
    426344
    427345       ; Likewise for <rdar://problem/43310000>
    … …  
    434352)
    435353
    436 (allow ipc-posix-shm-read* ipc-posix-shm-write-create ipc-posix-shm-write-data (with telemetry)
     354(allow ipc-posix-shm-read* ipc-posix-shm-write-create ipc-posix-shm-write-data
    437355       (ipc-posix-name "com.apple.AppleDatabaseChanged"))
    438356
    439357(system-network)
    440 (allow network-outbound (with telemetry)
     358(allow network-outbound
    441359    ;; Local mDNSResponder for DNS, arbitrary outbound TCP
    442360    (literal "/private/var/run/mDNSResponder")
    … …  
    444362
    445363;; FIXME should be removed when <rdar://problem/9347205> + related radar in Safari is fixed
    446 (allow mach-lookup (with telemetry)
     364(allow mach-lookup
    447365    (global-name "org.h5l.kcm")
    448366    (global-name "com.apple.GSSCred")
    449     (global-name "com.apple.ist.ds.appleconnect.service.kdctunnel") ;; Remove after <rdar://problem/35542803> ships
    450     (global-name "com.apple.system.logger"))
     367    (global-name "com.apple.ist.ds.appleconnect.service.kdctunnel")) ;; Remove after <rdar://problem/35542803> ships
    451368(allow network-outbound (with telemetry)
    452369    (remote udp))
    … …  
    455372    "com.apple.Kerberos"
    456373    "edu.mit.Kerberos")
    457 (allow file-read* (with telemetry)
    458     (literal "/private/etc/krb5.conf")
     374(allow file-read*
    459375    (literal "/private/etc/services")
    460376    (literal "/private/etc/hosts")
    … …  
    514430
    515431;; For reporting progress for active downloads <rdar://problem/44405661>
    516 (allow mach-lookup (with telemetry)
     432(allow mach-lookup
    517433    (global-name "com.apple.ProgressReporting"))
    518434
    519435;; Needed for TCC.
    520 (allow mach-lookup (with telemetry)
     436(allow mach-lookup
    521437    (global-name "com.apple.tccd"))
    522438
    523 (allow file-read* file-write* (with telemetry)
     439(allow file-read* file-write*
    524440    (home-subpath "/Library/HTTPStorages"))
    525441
    526 (allow file-read* (with telemetry)
    527     (prefix "/private/var/db/com.apple.networkextension.")
    528 )
     442(allow file-read*
     443    (prefix "/private/var/db/com.apple.networkextension."))
    529444
    530445(when (defined? 'syscall-unix)
    … …  
    532447    (allow syscall-unix (syscall-number
    533448        SYS___channel_get_info
     449        SYS___channel_open
    534450        SYS___channel_sync
    535451        SYS___disable_threadsignal
    536452        SYS___mac_syscall
     453        SYS___pthread_sigmask
     454        SYS___semwait_signal
    537455        SYS_access
    538456        SYS_bsdthread_create
    … …  
    541459        SYS_change_fdguard_np
    542460        SYS_csrctl
     461        SYS_dup
     462        SYS_exit
    543463        SYS_fcntl
    544464        SYS_fcntl_nocancel
     465        SYS_fgetattrlist
     466        SYS_fileport_makeport
     467        SYS_flock
    545468        SYS_fsgetpath
    546469        SYS_fstat
     470        SYS_fstat64
    547471        SYS_fstatat
     472        SYS_fstatat64
    548473        SYS_fstatfs
     474        SYS_fstatfs64
    549475        SYS_fsync
    550476        SYS_ftruncate
    … …  
    552478        SYS_getaudit_addr
    553479        SYS_getdirentries
     480        SYS_getdirentries64
     481        SYS_getegid
    554482        SYS_getentropy
    555483        SYS_geteuid
    556484        SYS_getfsstat
     485        SYS_getfsstat64
     486        SYS_getgid
     487        SYS_getgroups
     488        SYS_getpeername
    557489        SYS_getrlimit
     490        SYS_getsockname
     491        SYS_getsockopt
     492        SYS_gettid
    558493        SYS_gettimeofday
    559494        SYS_getuid
     495        SYS_getxattr
    560496        SYS_guarded_close_np
     497        SYS_guarded_open_dprotected_np
    561498        SYS_guarded_open_np
    562499        SYS_guarded_pwrite_np
    563500        SYS_iopolicysys
    564501        SYS_issetugid
     502        SYS_kdebug_trace64
     503        SYS_kdebug_trace_string
     504        SYS_kdebug_typefilter
     505        SYS_kevent
    565506        SYS_kevent_id
    566507        SYS_kevent_qos
     508        SYS_kqueue
     509        SYS_listxattr
    567510        SYS_lseek
    568511        SYS_lstat
     512        SYS_lstat64
     513        SYS_lstat64_extended
    569514        SYS_madvise
     515        SYS_memorystatus_control
     516        SYS_mkdir
    570517        SYS_mkdirat
    571518        SYS_mmap
    … …  
    575522        SYS_necp_client_action
    576523        SYS_necp_open
     524        SYS_open_dprotected_np
    577525        SYS_pathconf
     526        SYS_pipe
    578527        SYS_pread
    579528        SYS_pread_nocancel
     529        SYS_pselect
    580530        SYS_psynch_cvbroad
     531        SYS_psynch_cvclrprepost
    581532        SYS_psynch_cvsignal
    582533        SYS_psynch_cvwait
    583534        SYS_psynch_mutexdrop
    584535        SYS_psynch_mutexwait
     536        SYS_psynch_rw_rdlock
    585537        SYS_psynch_rw_unlock
    586538        SYS_psynch_rw_wrlock
    587539        SYS_read
     540        SYS_read_nocancel
     541        SYS_readlink
     542        SYS_recvfrom
     543        SYS_recvfrom_nocancel
     544        SYS_recvmsg
     545        SYS_rename
    588546        SYS_rmdir
    589547        SYS_select
     548        SYS_select_nocancel
     549        SYS_sendmsg
     550        SYS_sendmsg_nocancel
     551        SYS_sendto
     552        SYS_sendto_nocancel
    590553        SYS_setattrlistat
    591554        SYS_setrlimit
     555        SYS_setsockopt
     556        SYS_shutdown
     557        SYS_sigaltstack
     558        SYS_socketpair
    592559        SYS_stat
     560        SYS_stat64
     561        SYS_stat64_extended
    593562        SYS_statfs
     563        SYS_statfs64
    594564        SYS_thread_selfid
    595565        SYS_ulock_wait
Note: See TracChangeset for help on using the changeset viewer.