Changeset 295644 in webkit

Timestamp:

Jun 17, 2022 2:42:20 PM (2 years ago)

Author:

pvollan@apple.com

Message:

Remove some sandbox telemetry
​https://bugs.webkit.org/show_bug.cgi?id=241725

Reviewed by Geoffrey Garen.

Remove some sandbox telemetry in the WebContent process on iOS to make room for other telemetry.

• Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:

Canonical link: ​https://commits.webkit.org/251649@main

File:

• trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (modified) (4 diffs)

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in

@@ -354 +354 @@
         "com.apple.preferences.sounds")
 
-    (deny mach-lookup (with telemetry)
+    (deny mach-lookup
         (global-name "com.apple.frontboard.systemappservices")                 ; -[UIViewServiceInterface _createProcessAssertion] -> SBSProcessIDForDisplayIdentifier()
     )
@@ -519 +519 @@
 )
 
-(deny mach-lookup (with telemetry)
+(deny mach-lookup (with no-report)
     (global-name "com.apple.distributed_notifications@1v3"))
 
@@ -1173 +1173 @@
         SYS_fstatat64
         SYS_fsync
+        SYS_getattrlistbulk ;; xpc_realpath and directory enumeration
         SYS_getgid
         SYS_getxattr
+        SYS_iopolicysys
         SYS_mkdirat
+        SYS_open_dprotected_np
         SYS_openat_nocancel
         SYS_pread_nocancel
@@ -1196 +1199 @@
         SYS___pthread_sigmask
         SYS___semwait_signal
-        SYS_getattrlistbulk ;; xpc_realpath and directory enumeration
-        SYS_iopolicysys
 #if !ENABLE(CONTENT_FILTERING_IN_NETWORKING_PROCESS)
         SYS_necp_client_action
         SYS_necp_open
 #endif
-        SYS_open_dprotected_np
         SYS_psynch_rw_wrlock
         SYS_socket