Changeset 290250 in webkit


Ignore:
Timestamp:
Feb 21, 2022 10:10:40 AM (2 years ago)
Author:
pvollan@apple.com
Message:

[macOS] Remove resource access in sandbox for older OS versions
​https://bugs.webkit.org/show_bug.cgi?id=236975

Reviewed by Brent Fulgham.

Remove access to some resources in sandbox for older OS versions. Access to these resources were initially
added in ​https://trac.webkit.org/changeset/290180/webkit and ​https://trac.webkit.org/changeset/290066/webkit,
and was only intended to land on a branch.

  • NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
  • WebProcess/com.apple.WebProcess.sb.in:
Location:
trunk/Source/WebKit
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • trunk/Source/WebKit/ChangeLog

    r290246 r290250  
     12022-02-21  Per Arne Vollan  <pvollan@apple.com>
     2
     3        [macOS] Remove resource access in sandbox for older OS versions
     4        https://bugs.webkit.org/show_bug.cgi?id=236975
     5
     6        Reviewed by Brent Fulgham.
     7
     8        Remove access to some resources in sandbox for older OS versions. Access to these resources were initially
     9        added in https://trac.webkit.org/changeset/290180/webkit and https://trac.webkit.org/changeset/290066/webkit,
     10        and was only intended to land on a branch.
     11
     12        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
     13        * WebProcess/com.apple.WebProcess.sb.in:
     14
    1152022-02-21  Simon Lewis  <simon.lewis@apple.com>
    216

  • trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in

    r289926 r290250  
    113113#if ENABLE(SET_WEBCONTENT_PROCESS_INFORMATION_IN_NETWORK_PROCESS)
    114114(allow mach-lookup (global-name "com.apple.coreservices.launchservicesd"))
    115 #endif
    116 
    117 #if !PLATFORM(MAC) || __MAC_OS_X_VERSION_MIN_REQUIRED < 130000
    118 (allow mach-lookup
    119     (global-name
    120         "com.apple.analyticsd.messagetracer"
    121         "com.apple.appsleep"
    122         "com.apple.bsd.dirhelper"
    123         "com.apple.espd"
    124         "com.apple.secinitd"
    125         "com.apple.system.DirectoryService.libinfo_v1"
    126         "com.apple.system.logger"
    127         "com.apple.system.opendirectoryd.membership"
    128         "com.apple.xpc.activity.unmanaged"))
    129115#endif
    130116

  • trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

    r290183 r290250  
    18731873#endif
    18741874
    1875 #if !PLATFORM(MAC) || __MAC_OS_X_VERSION_MIN_REQUIRED < 130000
    1876 (define (syscall-unix-older-macOS)
    1877     (syscall-number
    1878         SYS___pthread_markcancel
    1879         SYS_abort_with_payload
    1880         SYS_chmod_extended
    1881         SYS_connect_nocancel
    1882         SYS_connectx
    1883         SYS_fgetattrlist ;; <rdar://problem/50931110>
    1884         SYS_fileport_makeport
    1885         SYS_fstat64_extended ;; <rdar://problem/61310019>
    1886         SYS_getpeername
    1887         SYS_getsockopt
    1888         SYS_guarded_write_np
    1889         SYS_lstat64_extended
    1890         SYS_lstat_extended
    1891         SYS_memorystatus_control ;; Needed for memory measurement infrastructure, see <rdar://problem/48647263>
    1892         SYS_mkdirat
    1893         SYS_open_dprotected_np ;; <rdar://problem/74473824>
    1894         SYS_pipe
    1895         SYS_process_policy
    1896         SYS_psynch_rw_rdlock ;; <rdar://problem/49060359>
    1897         SYS_pwrite
    1898         SYS_quotactl ;; <rdar://problem/49945031>
    1899         SYS_recvfrom
    1900         SYS_recvfrom_nocancel
    1901         SYS_rmdir
    1902         SYS_select
    1903         SYS_select_nocancel
    1904         SYS_sem_post
    1905         SYS_sem_wait
    1906         SYS_sendmsg_nocancel
    1907         SYS_sendto_nocancel
    1908 #if __MAC_OS_X_VERSION_MIN_REQUIRED < 120000
    1909         SYS_setattrlist ;; rdar://problem/74162777
    1910 #endif
    1911         SYS_setpriority
    1912         SYS_setrlimit
    1913         SYS_setsockopt
    1914         SYS_shutdown
    1915         SYS_sigreturn
    1916         SYS_socketpair
    1917         SYS_stat64_extended ;; <rdar://problem/50473330>
    1918         SYS_terminate_with_payload ;; <rdar://problem/50026580>
    1919         SYS_thread_selfusage
    1920 #if __MAC_OS_X_VERSION_MIN_REQUIRED >= 110000
    1921         SYS_ulock_wait2 ;; <rdar://problem/58743778>
    1922 #endif
    1923 ))
    1924 #endif
    1925 
    19261875(define (syscall-unix-common)
    19271876    (syscall-number
    … …  
    19711920        SYS_kdebug_trace64
    19721921        SYS_kdebug_trace_string ;; Needed for performance sampling, see <rdar://problem/48829655>.
    1973         SYS_kevent ;; <rdar://89072361>
    19741922        SYS_kevent_id
    19751923        SYS_kevent_qos
    … …  
    20471995        SYS_guarded_pwrite_np
    20481996        SYS_kdebug_typefilter
     1997        SYS_kevent ;; <rdar://89072361>
    20491998        SYS_mlock
    20501999        SYS_munlock
    … …  
    20782027    (allow syscall-unix
    20792028        (syscall-unix-common))
    2080 
    2081 #if !PLATFORM(MAC) || __MAC_OS_X_VERSION_MIN_REQUIRED < 130000
    2082     (allow syscall-unix
    2083         (syscall-unix-older-macOS))
    2084 #endif
    20852029
    20862030    (if (equal? (param "CPU") "arm64")
Note: See TracChangeset for help on using the changeset viewer.