⚠ Archived content — this site is no longer maintained.   Current WebKit documentation is at docs.webkit.org.

Changeset 294899 in webkit


Ignore:
Timestamp:
May 26, 2022, 2:31:26 PM (4 years ago)
Author:
pvollan@apple.com
Message:

[iOS][GPUP] Block unused system calls
​https://bugs.webkit.org/show_bug.cgi?id=240960
<rdar://84826074>

Reviewed by Chris Dumez.

  • Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb.in:

Canonical link: ​https://commits.webkit.org/251022@main

File:
1 edited

Legend:

Unmodified
Added
Removed

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb.in

    r293795 r294899  
    715715
    716716(when (defined? 'syscall-unix)
    717     (allow syscall-unix (with telemetry))
     717    (deny syscall-unix (with telemetry))
    718718    (allow syscall-unix (syscall-number
    719719        SYS___disable_threadsignal
    720720        SYS___mac_syscall
    721721        SYS___pthread_sigmask
     722        SYS___pthread_kill
    722723        SYS___semwait_signal
     724        SYS_abort_with_payload
    723725        SYS_access
    724726        SYS_bsdthread_create
    … …  
    805807        SYS_shm_open
    806808        SYS_sigaction
     809        SYS_sigprocmask
    807810        SYS_socket
    808811        SYS_stat64
    … …  
    823826
    824827(when (defined? 'syscall-mach)
    825     (allow syscall-mach (with telemetry))
     828    (deny syscall-mach (with telemetry))
    826829    (allow syscall-mach
    827830        (machtrap-number
Note: See TracChangeset for help on using the changeset viewer.