⚠ Archived content — this site is no longer maintained.   Current WebKit documentation is at docs.webkit.org.

Changeset 291814 in webkit


Ignore:
Timestamp:
Mar 24, 2022, 2:39:08 PM (5 years ago)
Author:
msaboff@apple.com
Message:

Update Sandbox profiles for system content path
​https://bugs.webkit.org/show_bug.cgi?id=238255

Reviewed by Per Arne Vollan.

Updated WebKit sandbox profiles to include system content path rule files when building with the system content path.
Changed the iOS profiles to be preprocessed to make these changes.

  • DerivedSources-input.xcfilelist
  • DerivedSources-output.xcfilelist
  • DerivedSources.make:
  • Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb: Removed.
  • Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb.in: Copied from Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb.
  • Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb: Removed.
  • Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.in: Copied from Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.
  • Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb: Removed.
  • Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb.in: Copied from Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb.
  • Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
  • Resources/SandboxProfiles/ios/com.apple.WebKit.adattributiond.sb: Removed.
  • Resources/SandboxProfiles/ios/com.apple.WebKit.adattributiond.sb.in: Copied from Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.adattributiond.sb.
  • Shared/Sandbox/preferences.sb:
  • WebAuthnProcess/mac/com.apple.WebKit.WebAuthnProcess.sb.in:
  • WebKit.xcodeproj/project.pbxproj:
  • WebProcess/com.apple.WebProcess.sb.in:
Location:
trunk/Source/WebKit
Files:
10 edited
4 moved

Legend:

Unmodified
Added
Removed

  • trunk/Source/WebKit/ChangeLog

    r291812 r291814  
     12022-03-24  Michael Saboff  <msaboff@apple.com>
     2
     3        Update Sandbox profiles for system content path
     4        https://bugs.webkit.org/show_bug.cgi?id=238255
     5
     6        Reviewed by Per Arne Vollan.
     7
     8        Updated WebKit sandbox profiles to include system content path rule files when building with the system content path.
     9        Changed the iOS profiles to be preprocessed to make these changes.
     10
     11        * DerivedSources-input.xcfilelist
     12        * DerivedSources-output.xcfilelist
     13        * DerivedSources.make:
     14        * Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb: Removed.
     15        * Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb.in: Copied from Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb.
     16        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb: Removed.
     17        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.in: Copied from Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.
     18        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb: Removed.
     19        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb.in: Copied from Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb.
     20        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
     21        * Resources/SandboxProfiles/ios/com.apple.WebKit.adattributiond.sb: Removed.
     22        * Resources/SandboxProfiles/ios/com.apple.WebKit.adattributiond.sb.in: Copied from Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.adattributiond.sb.
     23        * Shared/Sandbox/preferences.sb:
     24        * WebAuthnProcess/mac/com.apple.WebKit.WebAuthnProcess.sb.in:
     25        * WebKit.xcodeproj/project.pbxproj:
     26        * WebProcess/com.apple.WebProcess.sb.in:
     27
    1282022-03-24  Fujii Hironori  <Hironori.Fujii@sony.com>
    229

  • trunk/Source/WebKit/DerivedSources-input.xcfilelist

    r290957 r291814  
    107107$(PROJECT_DIR)/PluginProcess/WebProcessConnection.messages.in
    108108$(PROJECT_DIR)/PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in
     109$(PROJECT_DIR)/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb.in
     110$(PROJECT_DIR)/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.in
     111$(PROJECT_DIR)/Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb.in
    109112$(PROJECT_DIR)/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in
     113$(PROJECT_DIR)/Resources/SandboxProfiles/ios/com.apple.WebKit.adattributiond.sb.in
    110114$(PROJECT_DIR)/Scripts/PreferencesTemplates/WebPageUpdatePreferences.cpp.erb
    111115$(PROJECT_DIR)/Scripts/PreferencesTemplates/WebPreferencesDefinitions.h.erb

  • trunk/Source/WebKit/DerivedSources-output.xcfilelist

    r290903 r291814  
    644644$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit/WebUserContentControllerProxyMessages.h
    645645$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit/WebUserContentControllerProxyMessagesReplies.h
     646$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit/com.apple.WebKit.GPU.sb
    646647$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit/com.apple.WebKit.GPUProcess.sb
    647648$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit/com.apple.WebKit.NetworkProcess.sb
     649$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit/com.apple.WebKit.Networking.sb
     650$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit/com.apple.WebKit.WebAuthn.sb
    648651$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit/com.apple.WebKit.WebAuthnProcess.sb
    649652$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit/com.apple.WebKit.WebContent.sb
     653$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit/com.apple.WebKit.adattributiond.sb
    650654$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit/com.apple.WebKit.plugin-common.sb
    651655$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit/com.apple.WebKit.webpushd.sb

  • trunk/Source/WebKit/DerivedSources.make

    r290957 r291814  
    350350endif
    351351
     352ifeq ($(USE_SYSTEM_CONTENT_PATH),YES)
     353        SANDBOX_DEFINES = -DUSE_SYSTEM_CONTENT_PATH=1 -DSYSTEM_CONTENT_PATH=$(SYSTEM_CONTENT_PATH)
     354endif
     355
    352356SANDBOX_PROFILES = \
    353357        com.apple.WebProcess.sb \
    … …  
    358362       
    359363SANDBOX_PROFILES_IOS = \
    360         com.apple.WebKit.WebContent.sb \
     364        com.apple.WebKit.adattributiond.sb \
     365        com.apple.WebKit.GPU.sb \
     366        com.apple.WebKit.Networking.sb \
     367        com.apple.WebKit.WebAuthn.sb \
     368        com.apple.WebKit.WebContent.sb
    361369
    362370sandbox-profiles-ios : $(SANDBOX_PROFILES_IOS)
    … …  
    366374%.sb : %.sb.in
    367375        @echo Pre-processing $* sandbox profile...
    368         grep -o '^[^;]*' $< | $(CC) $(SDK_FLAGS) $(TARGET_TRIPLE_FLAGS) $(TEXT_PREPROCESSOR_FLAGS) $(FRAMEWORK_FLAGS) $(HEADER_FLAGS) -include "wtf/Platform.h" - > $@
     376        grep -o '^[^;]*' $< | $(CC) $(SDK_FLAGS) $(TARGET_TRIPLE_FLAGS) $(SANDBOX_DEFINES) $(TEXT_PREPROCESSOR_FLAGS) $(FRAMEWORK_FLAGS) $(HEADER_FLAGS) -include "wtf/Platform.h" - > $@
    369377
    370378AUTOMATION_PROTOCOL_GENERATOR_SCRIPTS = \

  • trunk/Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in

    r290174 r291814  
    3333#include "Shared/Sandbox/preferences.sb"
    3434
     35#if USE(SYSTEM_CONTENT_PATH)
     36#include <WebKitAdditions/SystemContentSandbox-macos.defs>
     37#endif
     38 
    3539;;;
    3640;;; The following rules were originally contained in 'system.sb'. We are duplicating them here so we can

  • trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in

    r291806 r291814  
    3939#include "Shared/Sandbox/preferences.sb"
    4040
     41#if USE(SYSTEM_CONTENT_PATH)
     42#include <WebKitAdditions/SystemContentSandbox-macos.defs>
     43#endif
     44 
    4145;; Utility functions for home directory relative path filters
    4246(define (home-regex home-relative-regex)

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb.in

    r291813 r291814  
    853853            MSC_task_self_trap
    854854            MSC_thread_get_special_reply_port)))
     855
     856#if USE(SYSTEM_CONTENT_PATH)
     857#include <WebKitAdditions/SystemContentSandbox-ios.defs>
     858
     859(allow file-read* file-test-existence
     860    (apply subpath file-read-existence-secondary-paths))
     861
     862(allow file-map-executable
     863    (apply subpath secondary-framework-and-dylib-paths))
     864
     865(allow-read-and-issue-generic-extensions
     866    (apply subpath issue-extension-secondary-paths))
     867
     868(allow file-issue-extension
     869    (require-all
     870        (extension-class "com.apple.mediaserverd.read")
     871        (apply subpath issue-extension-secondary-paths)))
     872#endif

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.in

    r291813 r291814  
    792792        (apply-message-filter
    793793            (allow mach-message-send (with report) ))))
     794
     795#if USE(SYSTEM_CONTENT_PATH)
     796#include <WebKitAdditions/SystemContentSandbox-ios.defs>
     797
     798(allow file-read* file-test-existence
     799    (apply subpath file-read-existence-secondary-paths))
     800
     801(allow file-map-executable
     802    (apply subpath secondary-framework-and-dylib-paths))
     803
     804(allow-read-and-issue-generic-extensions
     805    (apply subpath issue-extension-secondary-paths))
     806#endif

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebAuthn.sb.in

    r291813 r291814  
    446446        (literal "/private/var/run/syslog"))
    447447)
     448
     449#if USE(SYSTEM_CONTENT_PATH)
     450#include <WebKitAdditions/SystemContentSandbox-ios.defs>
     451
     452(allow file-read* file-test-existence
     453    (apply subpath file-read-existence-secondary-paths))
     454
     455(allow file-map-executable
     456    (apply subpath secondary-framework-and-dylib-paths))
     457#endif

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in

    r291630 r291814  
    16561656        "com.apple.automation.stringlookupinfoenabled"
    16571657        "com.apple.webinspectord.availability_check"))
     1658
     1659#if USE(SYSTEM_CONTENT_PATH)
     1660#include <WebKitAdditions/SystemContentSandbox-ios.defs>
     1661
     1662(allow file-read* file-test-existence
     1663    (apply subpath file-read-existence-secondary-paths))
     1664
     1665(allow file-map-executable
     1666    (apply subpath "secondary-framework-and-dylib-paths))
     1667
     1668(allow-read-and-issue-generic-extensions
     1669    (apply subpath issue-extension-secondary-paths))
     1670   
     1671(allow file-issue-extension
     1672    (require-all
     1673        (extension-class "com.apple.mediaserverd.read")
     1674        (require-any
     1675            (apply subpath issue-extension-secondary-paths)
     1676        )))
     1677#endif

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.adattributiond.sb.in

    r291813 r291814  
    192192(allow mach-lookup
    193193    (global-name "com.apple.cfnetwork.cfnetworkagent"))
     194   
     195#if USE(SYSTEM_CONTENT_PATH)
     196#include <WebKitAdditions/SystemContentSandbox-ios.defs>
     197
     198(allow file-read* file-test-existence
     199    (apply subpath file-read-existence-secondary-paths))
     200
     201(allow file-map-executable
     202    (apply subpath secondary-framework-and-dylib-paths))
     203#endif

  • trunk/Source/WebKit/WebAuthnProcess/mac/com.apple.WebKit.WebAuthnProcess.sb.in

    r289231 r291814  
    3232#include "Shared/Sandbox/preferences.sb"
    3333
     34#if USE(SYSTEM_CONTENT_PATH)
     35#include <WebKitAdditions/SystemContentSandbox-macos.defs>
     36#endif
     37 
    3438;;;
    3539;;; The following rules were originally contained in 'system.sb'. We are duplicating them here so we can
    … …  
    311315(allow-read-directory-and-issue-read-extensions "/System/Library/PrivateFrameworks/WebInspectorUI.framework")
    312316
     317#if USE(SYSTEM_CONTENT_PATH)
     318(map allow-read-directory-and-issue-read-extensions
     319    read-directory-and-issue-read-extension-secondary-paths)
     320#endif
     321
    313322;; Sandbox extensions
    314323(define (apply-read-and-issue-extension op path-filter)

  • trunk/Source/WebKit/WebKit.xcodeproj/project.pbxproj

    r291809 r291814  
    6565                        buildConfigurationList = A7AADA1419395CA9003EA1C7 /* Build configuration list for PBXAggregateTarget "Sandbox Profiles" */;
    6666                        buildPhases = (
    67                                 A7AADA1519395CC3003EA1C7 /* CopyFiles */,
    6867                                E30CFBA3266138730094D9C0 /* ShellScript */,
    6968                        );
    … …  
    694693                2DAF06D618BD1A470081CEB1 /* SmartMagnificationController.h in Headers */ = {isa = PBXBuildFile; fileRef = 2DAF06D418BD1A470081CEB1 /* SmartMagnificationController.h */; };
    695694                2DB94299234E7A7F00E776AD /* WKMouseGestureRecognizer.h in Headers */ = {isa = PBXBuildFile; fileRef = 2DB94297234E7A7F00E776AD /* WKMouseGestureRecognizer.h */; };
    696                 2DB96053239886C100102791 /* com.apple.WebKit.GPU.sb in CopyFiles */ = {isa = PBXBuildFile; fileRef = 2DB96052239886B900102791 /* com.apple.WebKit.GPU.sb */; };
    697695                2DC18FB3218A6E9E0025A88D /* RemoteLayerTreeViews.h in Headers */ = {isa = PBXBuildFile; fileRef = 2DC18FB1218A6E9E0025A88D /* RemoteLayerTreeViews.h */; };
    698696                2DC18FB4218A6E9E0025A88D /* RemoteLayerTreeViews.mm in Sources */ = {isa = PBXBuildFile; fileRef = 2DC18FB2218A6E9E0025A88D /* RemoteLayerTreeViews.mm */; };
    … …  
    12011199                57EB2E3A21E1983E00B89CDF /* U2fAuthenticator.h in Headers */ = {isa = PBXBuildFile; fileRef = 57EB2E3821E1983E00B89CDF /* U2fAuthenticator.h */; };
    12021200                57EBE26A234676C5008D8AF9 /* APIWebAuthenticationPanel.h in Headers */ = {isa = PBXBuildFile; fileRef = 57EBE268234676C5008D8AF9 /* APIWebAuthenticationPanel.h */; };
    1203                 57EFC77E2550EB8600F9477D /* com.apple.WebKit.WebAuthn.sb in CopyFiles */ = {isa = PBXBuildFile; fileRef = 57EFC77D2550EB8500F9477D /* com.apple.WebKit.WebAuthn.sb */; };
    12041201                57FABB0F25817CF00059DC95 /* AuthenticationServicesCoreSPI.h in Headers */ = {isa = PBXBuildFile; fileRef = 57FABB0E25817CF00059DC95 /* AuthenticationServicesCoreSPI.h */; };
    12051202                57FABB122581827C0059DC95 /* AuthenticationServicesCoreSoftLink.h in Headers */ = {isa = PBXBuildFile; fileRef = 57FABB102581827C0059DC95 /* AuthenticationServicesCoreSoftLink.h */; };
    … …  
    12161213                5C0B17781E7C880E00E9123C /* NetworkSocketStreamMessageReceiver.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 5C0B17741E7C879C00E9123C /* NetworkSocketStreamMessageReceiver.cpp */; };
    12171214                5C0B17791E7C882100E9123C /* WebSocketStreamMessageReceiver.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 5C0B17761E7C879C00E9123C /* WebSocketStreamMessageReceiver.cpp */; };
    1218                 5C0D161C27972C09008EDF0D /* com.apple.WebKit.adattributiond.sb in CopyFiles */ = {isa = PBXBuildFile; fileRef = 5C1578E5270E0DBC00ED5280 /* com.apple.WebKit.adattributiond.sb */; };
    12191215                5C121E842410208D00486F9B /* FrameTreeNodeData.h in Headers */ = {isa = PBXBuildFile; fileRef = 5C121E8324101F7000486F9B /* FrameTreeNodeData.h */; };
    12201216                5C121E89241029C900486F9B /* _WKFrameTreeNode.h in Headers */ = {isa = PBXBuildFile; fileRef = 5C121E882410290D00486F9B /* _WKFrameTreeNode.h */; settings = {ATTRIBUTES = (Private, ); }; };
    … …  
    16591655                A5EC6AD42151BD7B00677D17 /* WebPageDebuggable.h in Headers */ = {isa = PBXBuildFile; fileRef = A5EC6AD32151BD6900677D17 /* WebPageDebuggable.h */; };
    16601656                A5EFD38C16B0E88C00B2F0E8 /* WKPageVisibilityTypes.h in Headers */ = {isa = PBXBuildFile; fileRef = A5EFD38B16B0E88C00B2F0E8 /* WKPageVisibilityTypes.h */; settings = {ATTRIBUTES = (Private, ); }; };
    1661                 A78CCDDB193AC9F8005ECC25 /* com.apple.WebKit.Networking.sb in CopyFiles */ = {isa = PBXBuildFile; fileRef = A78CCDD8193AC9E3005ECC25 /* com.apple.WebKit.Networking.sb */; };
    16621657                A7D792D81767CCA300881CBE /* ActivityAssertion.h in Headers */ = {isa = PBXBuildFile; fileRef = A7D792D41767CB0900881CBE /* ActivityAssertion.h */; };
    16631658                AAB145E6223F931200E489D8 /* PrefetchCache.h in Headers */ = {isa = PBXBuildFile; fileRef = AAB145E4223F931200E489D8 /* PrefetchCache.h */; };
    … …  
    27402735                        );
    27412736                        name = "Copy Plug-ins";
    2742                         runOnlyForDeploymentPostprocessing = 0;
    2743                 };
    2744                 A7AADA1519395CC3003EA1C7 /* CopyFiles */ = {
    2745                         isa = PBXCopyFilesBuildPhase;
    2746                         buildActionMask = 2147483647;
    2747                         dstPath = "$(INSTALL_PATH)";
    2748                         dstSubfolderSpec = 0;
    2749                         files = (
    2750                                 5C0D161C27972C09008EDF0D /* com.apple.WebKit.adattributiond.sb in CopyFiles */,
    2751                                 2DB96053239886C100102791 /* com.apple.WebKit.GPU.sb in CopyFiles */,
    2752                                 A78CCDDB193AC9F8005ECC25 /* com.apple.WebKit.Networking.sb in CopyFiles */,
    2753                                 57EFC77E2550EB8600F9477D /* com.apple.WebKit.WebAuthn.sb in CopyFiles */,
    2754                         );
    27552737                        runOnlyForDeploymentPostprocessing = 0;
    27562738                };
    … …  
    41464128                2DB94297234E7A7F00E776AD /* WKMouseGestureRecognizer.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; name = WKMouseGestureRecognizer.h; path = ios/WKMouseGestureRecognizer.h; sourceTree = "<group>"; };
    41474129                2DB94298234E7A7F00E776AD /* WKMouseGestureRecognizer.mm */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.objcpp; name = WKMouseGestureRecognizer.mm; path = ios/WKMouseGestureRecognizer.mm; sourceTree = "<group>"; };
    4148                 2DB96052239886B900102791 /* com.apple.WebKit.GPU.sb */ = {isa = PBXFileReference; lastKnownFileType = text; path = com.apple.WebKit.GPU.sb; sourceTree = "<group>"; };
     4130                2DB96052239886B900102791 /* com.apple.WebKit.GPU.sb.in */ = {isa = PBXFileReference; lastKnownFileType = text; path = com.apple.WebKit.GPU.sb.in; sourceTree = "<group>"; };
    41494131                2DC18001D90DDD15FC6991A9 /* SharedBufferCopy.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = SharedBufferCopy.cpp; sourceTree = "<group>"; };
    41504132                2DC1855EDBFB850BA0B6D06D /* SharedBufferDataReference.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = SharedBufferDataReference.cpp; sourceTree = "<group>"; };
    … …  
    51375119                57EBE268234676C5008D8AF9 /* APIWebAuthenticationPanel.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = APIWebAuthenticationPanel.h; sourceTree = "<group>"; };
    51385120                57EBE269234676C5008D8AF9 /* APIWebAuthenticationPanel.cpp */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.cpp; path = APIWebAuthenticationPanel.cpp; sourceTree = "<group>"; };
    5139                 57EFC77D2550EB8500F9477D /* com.apple.WebKit.WebAuthn.sb */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; path = com.apple.WebKit.WebAuthn.sb; sourceTree = "<group>"; };
     5121                57EFC77D2550EB8500F9477D /* com.apple.WebKit.WebAuthn.sb.in */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; path = com.apple.WebKit.WebAuthn.sb.in; sourceTree = "<group>"; };
    51405122                57FABB0E25817CF00059DC95 /* AuthenticationServicesCoreSPI.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = AuthenticationServicesCoreSPI.h; sourceTree = "<group>"; };
    51415123                57FABB102581827C0059DC95 /* AuthenticationServicesCoreSoftLink.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = AuthenticationServicesCoreSoftLink.h; sourceTree = "<group>"; };
    … …  
    51805162                5C121E8B2410306600486F9B /* APIFrameTreeNode.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = APIFrameTreeNode.cpp; sourceTree = "<group>"; };
    51815163                5C13024A1FE341A7000D9B31 /* WebsitePoliciesData.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WebsitePoliciesData.h; sourceTree = "<group>"; };
    5182                 5C13559E27E250030022B527 /* AppStoreDaemonSPI.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; name = AppStoreDaemonSPI.h; path = AppStoreDaemonSPI.h; sourceTree = "<group>"; };
     5164                5C13559E27E250030022B527 /* AppStoreDaemonSPI.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = AppStoreDaemonSPI.h; sourceTree = "<group>"; };
    51835165                5C1426E21C23F80500D41183 /* NetworkProcessCreationParameters.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = NetworkProcessCreationParameters.cpp; sourceTree = "<group>"; };
    51845166                5C1426E31C23F80500D41183 /* NetworkProcessCreationParameters.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = NetworkProcessCreationParameters.h; sourceTree = "<group>"; };
    … …  
    51955177                5C1427151C23F8B000D41183 /* LegacyCustomProtocolManager.messages.in */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; path = LegacyCustomProtocolManager.messages.in; sourceTree = "<group>"; };
    51965178                5C14271B1C23F8CC00D41183 /* LegacyCustomProtocolManagerCocoa.mm */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.objcpp; path = LegacyCustomProtocolManagerCocoa.mm; sourceTree = "<group>"; };
    5197                 5C1578E5270E0DBC00ED5280 /* com.apple.WebKit.adattributiond.sb */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; path = com.apple.WebKit.adattributiond.sb; sourceTree = "<group>"; };
     5179                5C1578E5270E0DBC00ED5280 /* com.apple.WebKit.adattributiond.sb.in */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; path = com.apple.WebKit.adattributiond.sb.in; sourceTree = "<group>"; };
    51985180                5C1579DA27165B2F00ED5280 /* webpushd */ = {isa = PBXFileReference; explicitFileType = "compiled.mach-o.executable"; includeInIndex = 0; path = webpushd; sourceTree = BUILT_PRODUCTS_DIR; };
    51995181                5C1579DD27165BE500ED5280 /* webpushd.xcconfig */ = {isa = PBXFileReference; lastKnownFileType = text.xcconfig; path = webpushd.xcconfig; sourceTree = "<group>"; };
    … …  
    60436025                A5EFD38B16B0E88C00B2F0E8 /* WKPageVisibilityTypes.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WKPageVisibilityTypes.h; sourceTree = "<group>"; };
    60446026                A72D5D7F1236CBA800A88B15 /* APISerializedScriptValue.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = APISerializedScriptValue.h; sourceTree = "<group>"; };
    6045                 A78CCDD8193AC9E3005ECC25 /* com.apple.WebKit.Networking.sb */ = {isa = PBXFileReference; lastKnownFileType = text; path = com.apple.WebKit.Networking.sb; sourceTree = "<group>"; };
     6027                A78CCDD8193AC9E3005ECC25 /* com.apple.WebKit.Networking.sb.in */ = {isa = PBXFileReference; lastKnownFileType = text; path = com.apple.WebKit.Networking.sb.in; sourceTree = "<group>"; };
    60466028                A7D792D41767CB0900881CBE /* ActivityAssertion.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = ActivityAssertion.h; sourceTree = "<group>"; };
    60476029                A7D792D51767CB6E00881CBE /* ActivityAssertion.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = ActivityAssertion.cpp; sourceTree = "<group>"; };
    … …  
    1144011422                        isa = PBXGroup;
    1144111423                        children = (
    11442                                 5C1578E5270E0DBC00ED5280 /* com.apple.WebKit.adattributiond.sb */,
    11443                                 2DB96052239886B900102791 /* com.apple.WebKit.GPU.sb */,
    11444                                 A78CCDD8193AC9E3005ECC25 /* com.apple.WebKit.Networking.sb */,
    11445                                 57EFC77D2550EB8500F9477D /* com.apple.WebKit.WebAuthn.sb */,
     11424                                5C1578E5270E0DBC00ED5280 /* com.apple.WebKit.adattributiond.sb.in */,
     11425                                2DB96052239886B900102791 /* com.apple.WebKit.GPU.sb.in */,
     11426                                A78CCDD8193AC9E3005ECC25 /* com.apple.WebKit.Networking.sb.in */,
     11427                                57EFC77D2550EB8500F9477D /* com.apple.WebKit.WebAuthn.sb.in */,
    1144611428                                E313664D265EE5AF0051084F /* com.apple.WebKit.WebContent.sb.in */,
    1144711429                        );
    … …  
    1682716809                        runOnlyForDeploymentPostprocessing = 0;
    1682816810                        shellPath = /bin/sh;
    16829                         shellScript = "echo \"Preprocessing sandbox\"\nScripts/generate-derived-sources.sh sandbox-profiles-ios\ncp ${BUILT_PRODUCTS_DIR}/DerivedSources/WebKit/com.apple.WebKit.WebContent.sb ${DSTROOT}/${INSTALL_PATH}\n";
     16811                        shellScript = "echo \"Preprocessing sandbox\"\nScripts/generate-derived-sources.sh sandbox-profiles-ios\ncp ${BUILT_PRODUCTS_DIR}/DerivedSources/WebKit/com.apple.WebKit.adattributiond.sb ${DSTROOT}/${INSTALL_PATH}\ncp ${BUILT_PRODUCTS_DIR}/DerivedSources/WebKit/com.apple.WebKit.GPU.sb ${DSTROOT}/${INSTALL_PATH}\ncp ${BUILT_PRODUCTS_DIR}/DerivedSources/WebKit/com.apple.WebKit.Networking.sb ${DSTROOT}/${INSTALL_PATH}\ncp ${BUILT_PRODUCTS_DIR}/DerivedSources/WebKit/com.apple.WebKit.WebAuth.sb ${DSTROOT}/${INSTALL_PATH}\ncp ${BUILT_PRODUCTS_DIR}/DerivedSources/WebKit/com.apple.WebKit.WebContent.sb ${DSTROOT}/${INSTALL_PATH}\n";
    1683016812                };
    1683116813/* End PBXShellScriptBuildPhase section */

  • trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

    r291806 r291814  
    3333#include "Shared/Sandbox/preferences.sb"
    3434
     35#if USE(SYSTEM_CONTENT_PATH)
     36#include <WebKitAdditions/SystemContentSandbox-macos.defs>
     37#endif
     38 
    3539;;;
    3640;;; The following rules were originally contained in 'system.sb'. We are duplicating them here so we can
    … …  
    10981102(allow-read-directory-and-issue-read-extensions "/System/Library/PrivateFrameworks/WebInspectorUI.framework")
    10991103
     1104#if USE(SYSTEM_CONTENT_PATH)
     1105(map allow-read-directory-and-issue-read-extensions
     1106    read-directory-and-issue-read-extension-secondary-paths)
     1107#endif
     1108
    11001109;; Sandbox extensions
    11011110(define (apply-read-and-issue-extension op path-filter)
Note: See TracChangeset for help on using the changeset viewer.