Changeset 294824 in webkit

Timestamp:

May 25, 2022, 2:38:32 PM (4 years ago)

Author:

pvollan@apple.com

Message:

[iOS] WebContent captive portal XPC service needs entitlement to set sandbox state variables
​https://bugs.webkit.org/show_bug.cgi?id=240921

Reviewed by Geoffrey Garen.

This patch also adds a function for the shared WebContent entitlements on iOS.

• Source/WebKit/Scripts/process-entitlements.sh:

Canonical link: ​https://commits.webkit.org/250976@main

File:

• trunk/Source/WebKit/Scripts/process-entitlements.sh (modified) (4 diffs)

trunk/Source/WebKit/Scripts/process-entitlements.sh

@@ -308 +308 @@
 # ========================================
 
-function ios_family_process_webcontent_entitlements()
+function ios_family_process_webcontent_shared_entitlements()
 {
     plistbuddy Add :com.apple.QuartzCore.secure-mode bool YES
@@ -323 +323 @@
     plistbuddy Add :com.apple.private.network.socket-delegate bool YES
     plistbuddy Add :com.apple.private.pac.exception bool YES
-    plistbuddy Add :com.apple.private.verified-jit bool YES
     plistbuddy Add :com.apple.private.security.message-filter bool YES
     plistbuddy Add :com.apple.private.security.mutable-state-flags array
@@ -331 +330 @@
     plistbuddy Add :com.apple.private.webkit.use-xpc-endpoint bool YES
     plistbuddy Add :com.apple.runningboard.assertions.webkit bool YES
-    plistbuddy Add :dynamic-codesigning bool YES
-
     plistbuddy Add :com.apple.tcc.delegated-services array
     plistbuddy Add :com.apple.tcc.delegated-services:0 string kTCCServiceCamera
     plistbuddy Add :com.apple.tcc.delegated-services:1 string kTCCServiceMicrophone
-
     plistbuddy Add :com.apple.private.sandbox.profile string com.apple.WebKit.WebContent
 }
 
+function ios_family_process_webcontent_entitlements()
+{
+    plistbuddy Add :com.apple.private.verified-jit bool YES
+    plistbuddy Add :dynamic-codesigning bool YES
+
+    ios_family_process_webcontent_shared_entitlements
+}
+
 function ios_family_process_webcontent_captiveportal_entitlements()
 {
-    plistbuddy Add :com.apple.QuartzCore.secure-mode bool YES
-    plistbuddy Add :com.apple.QuartzCore.webkit-end-points bool YES
-    plistbuddy add :com.apple.QuartzCore.webkit-limited-types bool YES
-    plistbuddy Add :com.apple.developer.coremedia.allow-alternate-video-decoder-selection bool YES
     plistbuddy Add :com.apple.developer.kernel.extended-virtual-addressing bool YES
-    plistbuddy Add :com.apple.mediaremote.set-playback-state bool YES
-    plistbuddy Add :com.apple.pac.shared_region_id string WebContent
-    plistbuddy Add :com.apple.private.allow-explicit-graphics-priority bool YES
-    plistbuddy Add :com.apple.private.coremedia.extensions.audiorecording.allow bool YES
-    plistbuddy Add :com.apple.private.coremedia.pidinheritance.allow bool YES
-    plistbuddy Add :com.apple.private.gpu-restricted bool YES
-    plistbuddy Add :com.apple.private.memorystatus bool YES
-    plistbuddy Add :com.apple.private.network.socket-delegate bool YES
-    plistbuddy Add :com.apple.private.pac.exception bool YES
-    plistbuddy Add :com.apple.private.security.message-filter bool YES
-    plistbuddy Add :com.apple.private.webinspector.allow-remote-inspection bool YES
-    plistbuddy Add :com.apple.private.webinspector.proxy-application bool YES
-    plistbuddy Add :com.apple.private.webkit.use-xpc-endpoint bool YES
-    plistbuddy Add :com.apple.runningboard.assertions.webkit bool YES
 
     plistbuddy Add :com.apple.imageio.allowabletypes array
@@ -368 +354 @@
     plistbuddy Add :com.apple.imageio.allowabletypes:3 string com.compuserve.gif
 
-    plistbuddy Add :com.apple.tcc.delegated-services array
-    plistbuddy Add :com.apple.tcc.delegated-services:0 string kTCCServiceCamera
-    plistbuddy Add :com.apple.tcc.delegated-services:1 string kTCCServiceMicrophone
-
-    plistbuddy Add :com.apple.private.sandbox.profile string com.apple.WebKit.WebContent
+    ios_family_process_webcontent_shared_entitlements
 }