Changeset 292565 in webkit

Timestamp:

Apr 7, 2022 2:05:05 PM (2 years ago)

Author:

pvollan@apple.com

Message:

[iOS][WP] Block kernel routines
​https://bugs.webkit.org/show_bug.cgi?id=238898

Reviewed by Geoffrey Garen.

Block kernel routines only used during launch of the WebContent process on iOS. This is based on collected telemetry.

• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (modified) (1 diff)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2022-04-07  Per Arne Vollan  <pvollan@apple.com>
+
+        [iOS][WP] Block kernel routines
+        https://bugs.webkit.org/show_bug.cgi?id=238898
+
+        Reviewed by Geoffrey Garen.
+
+        Block kernel routines only used during launch of the WebContent process on iOS. This is based on collected telemetry.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+
 2022-04-07  Simon Fraser  <simon.fraser@apple.com>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in

@@ -1646 +1646 @@
                     (kernel-mig-routine-only-in-use-during-launch)))
             (with-filter (state-flag "WebContentProcessLaunched")
-                (allow mach-message-send
-                    (with report)
+                (deny mach-message-send
                     (with telemetry)
                     (with message "kernel mig routine used after launch")