Changeset 150175 in webkit

Timestamp:

May 15, 2013, 9:34:51 PM (12 years ago)

Author:

ap@apple.com

Message:

Enable printing in plugins
​https://bugs.webkit.org/show_bug.cgi?id=116201
<rdar://problem/12347902>

Reviewed by Alexey Proskuryakov.

Add the printing entitlement so that legacy printing drivers can
customize the print panel. Update the printing rules and enable them
for the plugins.

• Configurations/PluginService.entitlements:
• Resources/PlugInSandboxProfiles/com.apple.WebKit.plugin-common.sb:
• Resources/PlugInSandboxProfiles/com.macromedia.Flash Player.plugin.sb:
• Resources/PlugInSandboxProfiles/com.microsoft.SilverlightPlugin.sb:
• Resources/PlugInSandboxProfiles/com.oracle.java.JavaAppletPlugin.sb:

Location:

trunk/Source/WebKit2

Files:

• ChangeLog (modified) (1 diff)
• Configurations/PluginService.entitlements (modified) (1 diff)
• Resources/PlugInSandboxProfiles/com.apple.WebKit.plugin-common.sb (modified) (4 diffs)
• Resources/PlugInSandboxProfiles/com.macromedia.Flash Player.plugin.sb (modified) (1 diff)
• Resources/PlugInSandboxProfiles/com.microsoft.SilverlightPlugin.sb (modified) (1 diff)
• Resources/PlugInSandboxProfiles/com.oracle.java.JavaAppletPlugin.sb (modified) (1 diff)

trunk/Source/WebKit2/ChangeLog ¶

@@ +1 @@
+2013-05-15  Simon Cooper  <scooper@apple.com>
+
+        Enable printing in plugins
+        https://bugs.webkit.org/show_bug.cgi?id=116201
+        <rdar://problem/12347902>
+
+        Reviewed by Alexey Proskuryakov.
+
+        Add the printing entitlement so that legacy printing drivers can
+        customize the print panel. Update the printing rules and enable them
+        for the plugins.
+
+        * Configurations/PluginService.entitlements:
+        * Resources/PlugInSandboxProfiles/com.apple.WebKit.plugin-common.sb:
+        * Resources/PlugInSandboxProfiles/com.macromedia.Flash Player.plugin.sb:
+        * Resources/PlugInSandboxProfiles/com.microsoft.SilverlightPlugin.sb:
+        * Resources/PlugInSandboxProfiles/com.oracle.java.JavaAppletPlugin.sb:
+
 2013-05-15  Anders Carlsson  <andersca@apple.com>
 

trunk/Source/WebKit2/Configurations/PluginService.entitlements ¶

@@ -3 +3 @@
 <plist version="1.0">
 <dict>
+        <key>com.apple.security.print</key>
+        <true/>
         <key>com.apple.security.files.user-selected.read-write</key>
         <true/>

trunk/Source/WebKit2/Resources/PlugInSandboxProfiles/com.apple.WebKit.plugin-common.sb ¶

@@ -177 +177 @@
     (global-name "com.apple.cmio.VDCAssistant")
     (global-name "com.apple.cookied") ;; FIXME: <rdar://problem/10790768> Limit access to cookies.
+    (global-name "com.apple.coreservices.launchservicesd")
     (global-name "com.apple.ocspd")
     (global-name "com.apple.pasteboard.1")
@@ -231 +232 @@
 ;; Printing
 (define (webkit-printing)
+    (if (defined? 'authorization-right-obtain)
+        (allow authorization-right-obtain
+               (right-name "system.print.operator")
+               (right-name "system.printingmanager")))
+    (if (defined? 'mach-register)
+        (deny mach-register (with no-log)
+               (global-name-regex #"^com\.apple\.ICA-[0-9]+$")))
+    (if (defined? 'mach-task-name)
+        (allow mach-task-name))
     (allow network-outbound (literal "/private/var/run/cupsd"))
     (allow mach-lookup
@@ -237 +247 @@
         (global-name "com.apple.printtool.daemon"))
     (allow file-read*
+        (subpath "/Library/Printers")
         (home-literal "/.cups/lpoptions")
         (home-literal "/.cups/client.conf")
@@ -242 +253 @@
         (literal "/private/etc/cups/lpoptions")
         (subpath "/private/etc/cups/ppd")
-        (subpath "/private/var/run/cupsd")
-        (shared-preferences-read "org.cups.PrintingPrefs")))
+        (subpath "/private/var/run/cupsd"))
+    (shared-preferences-read "org.cups.PrintingPrefs"))
 
 ;; Text Services Manager

trunk/Source/WebKit2/Resources/PlugInSandboxProfiles/com.macromedia.Flash Player.plugin.sb ¶

@@ -28 +28 @@
 
 (webkit-powerbox)
+(webkit-printing)

trunk/Source/WebKit2/Resources/PlugInSandboxProfiles/com.microsoft.SilverlightPlugin.sb ¶

@@ -21 +21 @@
 (allow ipc-posix-shm*
     (ipc-posix-name-regex #"^CoreCLR_"))
+
+(webkit-printing)

trunk/Source/WebKit2/Resources/PlugInSandboxProfiles/com.oracle.java.JavaAppletPlugin.sb ¶

@@ -36 +36 @@
 (deny job-creation (with no-log))
 (deny file-write* (with no-log) (subpath "/Library/Application Support/Oracle"))
+
+(webkit-printing)