Changeset 287069 in webkit

Timestamp:

Dec 15, 2021, 2:16:10 AM (5 years ago)

Author:

pvollan@apple.com

Message:

[iOS][WP] Add access to required syscall
​https://bugs.webkit.org/show_bug.cgi?id=234336
<rdar://86502081>

Reviewed by Tim Horton.

Add required syscall to the WebContent process' sandbox on iOS. This syscall was blocked in
​https://trac.webkit.org/changeset/286673/webkit.

• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (modified) (1 diff)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2021-12-15  Per Arne Vollan  <pvollan@apple.com>
+
+        [iOS][WP] Add access to required syscall
+        https://bugs.webkit.org/show_bug.cgi?id=234336
+        <rdar://86502081>
+
+        Reviewed by Tim Horton.
+
+        Add required syscall to the WebContent process' sandbox on iOS. This syscall was blocked in
+        https://trac.webkit.org/changeset/286673/webkit.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+
 2021-12-14  Jean-Yves Avenard  <jya@apple.com>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in

@@ -1638 +1638 @@
                 (allow mach-message-send (kernel-mig-routine mach_port_is_connection_for_service))
             )
+
+            (if (and gizmo? (defined? 'mach_make_memory_entry))
+                (allow mach-message-send (kernel-mig-routine mach_make_memory_entry)))
+            (if (and gizmo? (defined? 'mach_make_memory_entry_64))
+                (allow mach-message-send (kernel-mig-routine mach_make_memory_entry_64)))
         )
     )