Changeset 288269 in webkit

Timestamp:

Jan 19, 2022, 8:09:15 PM (5 years ago)

Author:

Brent Fulgham

Message:

Grant access to GlobalPreferences and GlobalPreferences_m uniformly
​https://bugs.webkit.org/show_bug.cgi?id=235387
<rdar://problem/86943871>

Reviewed by Per Arne Vollan.

We should allow access to GlobalPreferences_m.plist in the places where we currently
allow GlobalPreferences.plist. We are inconsistent about this in our sandboxes, and
telemetry shows that we need to provide access.

• Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb (modified) (1 diff)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2022-01-19  Brent Fulgham  <bfulgham@apple.com>
+
+        Grant access to GlobalPreferences and GlobalPreferences_m uniformly
+        https://bugs.webkit.org/show_bug.cgi?id=235387
+        <rdar://problem/86943871>
+
+        Reviewed by Per Arne Vollan.
+
+        We should allow access to GlobalPreferences_m.plist in the places where we currently
+        allow GlobalPreferences.plist. We are inconsistent about this in our sandboxes, and
+        telemetry shows that we need to provide access.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb:
+
 2022-01-19  Chris Dumez  <cdumez@apple.com>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb

@@ -339 +339 @@
     (allow user-preference-read (preference-domain "kCFPreferencesAnyApplication"))
     (allow file-read*
-        (front-user-home-literal "/Library/Preferences/.GlobalPreferences.plist"))
+           (front-user-home-literal "/Library/Preferences/.GlobalPreferences.plist")
+           (front-user-home-literal "/Library/Preferences/.GlobalPreferences_m.plist"))
 
     (allow file-read*

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb

@@ -192 +192 @@
     (allow user-preference-read (preference-domain "kCFPreferencesAnyApplication"))
     (allow file-read*
-        (front-user-home-literal "/Library/Preferences/.GlobalPreferences.plist"))
+           (front-user-home-literal "/Library/Preferences/.GlobalPreferences.plist")
+           (front-user-home-literal "/Library/Preferences/.GlobalPreferences_m.plist"))
     (allow managed-preference-read (preference-domain "kCFPreferencesAnyApplication"))
     
     (allow file-read*
-        (front-user-home-literal "/Library/Preferences/.GlobalPreferences.plist")
         (literal "/private/var/Managed Preferences/mobile/.GlobalPreferences.plist")
     )