Changeset 286010 in webkit

Timestamp:

Nov 18, 2021, 9:58:57 AM (5 years ago)

Author:

pvollan@apple.com

Message:

[macOS] Block access to unused resources in the Networking process' sandbox
​https://bugs.webkit.org/show_bug.cgi?id=233086
<rdar://problem/85376544>

Reviewed by Brent Fulgham.

Follow-up patch, allow access to logging service for root.

• NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (modified) (1 diff)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2021-11-18  Per Arne Vollan  <pvollan@apple.com>
+
+        [macOS] Block access to unused resources in the Networking process' sandbox
+        https://bugs.webkit.org/show_bug.cgi?id=233086
+        <rdar://problem/85376544>
+
+        Reviewed by Brent Fulgham.
+
+        Follow-up patch, allow access to logging service for root.
+
+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+
 2021-11-18  Youenn Fablet  <youenn@apple.com>
 

trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in

@@ -360 +360 @@
     (literal "/private/var/run/mDNSResponder")
     (remote tcp))
+
+(with-filter (uid 0)
+    (allow mach-lookup
+        (global-name "com.apple.system.logger")))
 
 ;; FIXME should be removed when <rdar://problem/9347205> + related radar in Safari is fixed