Changeset 286460 in webkit

Timestamp:

Dec 2, 2021, 3:48:09 PM (5 years ago)

Author:

pvollan@apple.com

Message:

[iOS] Add required system call to WebKit sandboxes
​https://bugs.webkit.org/show_bug.cgi?id=233730
<rdar://85266065>

Reviewed by Brent Fulgham.

• GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
• NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
• Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb:
• Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
• WebProcess/com.apple.WebProcess.sb.in:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in (modified) (1 diff)
• NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (modified) (1 diff)
• WebProcess/com.apple.WebProcess.sb.in (modified) (1 diff)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2021-12-02  Per Arne Vollan  <pvollan@apple.com>
+
+        [iOS] Add required system call to WebKit sandboxes
+        https://bugs.webkit.org/show_bug.cgi?id=233730
+        <rdar://85266065>
+
+        Reviewed by Brent Fulgham.
+
+        * GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2021-12-02  Myles C. Maxfield  <mmaxfield@apple.com>
 

trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in

@@ -1003 +1003 @@
         SYS_work_interval_ctl
         SYS_workq_kernreturn)))
+
+(when (defined? 'SYS__map_with_linking_np)
+    (allow syscall-unix SYS__map_with_linking_np))

trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in

@@ -571 +571 @@
         SYS_workq_kernreturn)))
 
+(when (defined? 'SYS__map_with_linking_np)
+    (allow syscall-unix SYS__map_with_linking_np))
+
 #if HAVE(SANDBOX_MESSAGE_FILTERING)
 (when (and (equal? (param "ENABLE_SANDBOX_MESSAGE_FILTER") "YES") (defined? 'mach-kernel-endpoint))

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb

@@ -808 +808 @@
         SYS_writev)))
 
+(when (defined? 'SYS__map_with_linking_np)
+    (allow syscall-unix SYS__map_with_linking_np))
+
 (when (defined? 'syscall-mach)
     (allow syscall-mach (with telemetry))

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb

@@ -738 +738 @@
         SYS_writev)))
 
+(when (defined? 'SYS__map_with_linking_np)
+    (allow syscall-unix SYS__map_with_linking_np))
+
 (when (defined? 'syscall-mach)
     (allow syscall-mach (with report) (with telemetry))

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in

@@ -1369 +1369 @@
 )
 
+(when (defined? 'SYS__map_with_linking_np)
+    (allow syscall-unix SYS__map_with_linking_np))
+
 (with-filter (system-attribute apple-internal)
     (when (defined? 'syscall-unix)

trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

@@ -2082 +2082 @@
         (allow syscall-unix (syscall-number SYS_objc_bp_assist_cfg_np)))
 #endif
+    (when (defined? 'SYS__map_with_linking_np)
+        (allow syscall-unix SYS__map_with_linking_np))
 )