Changeset 288520 in webkit

Timestamp:

Jan 24, 2022, 5:56:18 PM (5 years ago)

Author:

Russell Epstein

Message:

Cherry-pick r288269. rdar://problem/86943871

Grant access to GlobalPreferences and GlobalPreferences_m uniformly
​https://bugs.webkit.org/show_bug.cgi?id=235387
<rdar://problem/86943871>

Reviewed by Per Arne Vollan.

We should allow access to GlobalPreferences_m.plist in the places where we currently
allow GlobalPreferences.plist. We are inconsistent about this in our sandboxes, and
telemetry shows that we need to provide access.

• Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb:

git-svn-id: ​https://svn.webkit.org/repository/webkit/trunk@288269 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Location:

branches/safari-613-branch/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb (modified) (1 diff)

branches/safari-613-branch/Source/WebKit/ChangeLog

@@ +1 @@
+2022-01-24  Alan Coon  <alancoon@apple.com>
+
+        Cherry-pick r288269. rdar://problem/86943871
+
+    Grant access to GlobalPreferences and GlobalPreferences_m uniformly
+    https://bugs.webkit.org/show_bug.cgi?id=235387
+    <rdar://problem/86943871>
+    
+    Reviewed by Per Arne Vollan.
+    
+    We should allow access to GlobalPreferences_m.plist in the places where we currently
+    allow GlobalPreferences.plist. We are inconsistent about this in our sandboxes, and
+    telemetry shows that we need to provide access.
+    
+    * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+    * Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb:
+    
+    
+    git-svn-id: https://svn.webkit.org/repository/webkit/trunk@288269 268f45cc-cd09-0410-ab3c-d52691b4dbfc
+
+    2022-01-19  Brent Fulgham  <bfulgham@apple.com>
+
+            Grant access to GlobalPreferences and GlobalPreferences_m uniformly
+            https://bugs.webkit.org/show_bug.cgi?id=235387
+            <rdar://problem/86943871>
+
+            Reviewed by Per Arne Vollan.
+
+            We should allow access to GlobalPreferences_m.plist in the places where we currently
+            allow GlobalPreferences.plist. We are inconsistent about this in our sandboxes, and
+            telemetry shows that we need to provide access.
+
+            * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+            * Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb:
+
 2022-01-24  Alan Coon  <alancoon@apple.com>
 

branches/safari-613-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb

@@ -338 +338 @@
     (allow user-preference-read (preference-domain "kCFPreferencesAnyApplication"))
     (allow file-read*
-        (front-user-home-literal "/Library/Preferences/.GlobalPreferences.plist"))
+           (front-user-home-literal "/Library/Preferences/.GlobalPreferences.plist")
+           (front-user-home-literal "/Library/Preferences/.GlobalPreferences_m.plist"))
 
     (allow file-read*

branches/safari-613-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb

@@ -192 +192 @@
     (allow user-preference-read (preference-domain "kCFPreferencesAnyApplication"))
     (allow file-read*
-        (front-user-home-literal "/Library/Preferences/.GlobalPreferences.plist"))
+           (front-user-home-literal "/Library/Preferences/.GlobalPreferences.plist")
+           (front-user-home-literal "/Library/Preferences/.GlobalPreferences_m.plist"))
     (allow managed-preference-read (preference-domain "kCFPreferencesAnyApplication"))
     
     (allow file-read*
-        (front-user-home-literal "/Library/Preferences/.GlobalPreferences.plist")
         (literal "/private/var/Managed Preferences/mobile/.GlobalPreferences.plist")
     )