Changeset 291982 in webkit


Ignore:
Timestamp:
Mar 28, 2022 12:33:54 PM (2 years ago)
Author:
pvollan@apple.com
Message:

[iOS] Fix sandbox violation related to Network content filtering
​https://bugs.webkit.org/show_bug.cgi?id=238458
<rdar://90927474>

Reviewed by Brent Fulgham.

After enabling Network content filtering in the Network process, a related sandbox rule should
be moved to the Network process' sandbox.

  • Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.in:
  • Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
Location:
trunk/Source/WebKit
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • trunk/Source/WebKit/ChangeLog

    r291980 r291982  
     12022-03-28  Per Arne Vollan  <pvollan@apple.com>
     2
     3        [iOS] Fix sandbox violation related to Network content filtering
     4        https://bugs.webkit.org/show_bug.cgi?id=238458
     5        <rdar://90927474>
     6 
     7        Reviewed by Brent Fulgham.
     8
     9        After enabling Network content filtering in the Network process, a related sandbox rule should
     10        be moved to the Network process' sandbox.
     11
     12        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.in:
     13        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
     14
    1152022-03-28  Devin Rousso  <drousso@apple.com>
    216

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.in

    r291943 r291982  
    138138        (prefix "/private/var/db/com.apple.networkextension.")
    139139    )
     140
     141#if ENABLE(CONTENT_FILTERING_IN_NETWORKING_PROCESS)
     142    (allow file-read* (literal "/private/var/Managed Preferences/mobile/com.apple.webcontentfilter.plist"))
     143#endif
    140144
    141145    (allow mach-lookup

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in

    r291943 r291982  
    10171017(allow file-map-executable)
    10181018
     1019#if !ENABLE(CONTENT_FILTERING_IN_NETWORKING_PROCESS)
    10191020;; Allow ManagedPreference access
    10201021(allow file-read* (literal "/private/var/Managed Preferences/mobile/com.apple.webcontentfilter.plist"))
     1022#endif
    10211023
    10221024(allow file-read-data
Note: See TracChangeset for help on using the changeset viewer.