Changeset 286022 in webkit

Timestamp:

Nov 18, 2021, 12:54:55 PM (5 years ago)

Author:

pvollan@apple.com

Message:

[iOS] Block access to unused resources in the Networking process' sandbox
​https://bugs.webkit.org/show_bug.cgi?id=233129
<rdar://problem/85411927>

Unreviewed, fix sandbox syntax errors.

• Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb (modified) (2 diffs)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2021-11-18  Per Arne  <pvollan@apple.com>
+
+        [iOS] Block access to unused resources in the Networking process' sandbox
+        https://bugs.webkit.org/show_bug.cgi?id=233129
+        <rdar://problem/85411927>
+
+        Unreviewed, fix sandbox syntax errors.
+        
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+
 2021-11-18  Antoine Quint  <graouts@webkit.org>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb

@@ -322 +322 @@
         (subpath "/usr/lib"
                  "/usr/share"
-                 "/private/var/db/timezone")
+                 "/private/var/db/timezone"
                  "/private/var/preferences/Logging"))
 
@@ -462 +462 @@
 (deny lsopen)
 
-(deny sysctl*) (with telemetry)
+(deny sysctl* (with telemetry))
 (allow sysctl-read
     (sysctl-name