Changeset 199628 in webkit


Ignore:
Timestamp:
Apr 16, 2016, 2:37:08 PM (9 years ago)
Author:
mitz@apple.com
Message:

[Mac] Web Content service with a restricted entitlement may load arbitrary dylibs
​https://bugs.webkit.org/show_bug.cgi?id=156668
<rdar://problem/25429784>

Reviewed by Anders Carlsson.

  • Configurations/WebContentService.xcconfig: Enable library validation when the Web Content service is given the XPC domain extension entitlement.
Location:
trunk/Source/WebKit2
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • trunk/Source/WebKit2/ChangeLog

    r199622 r199628  
     12016-04-16  Dan Bernstein  <mitz@apple.com>
     2
     3        [Mac] Web Content service with a restricted entitlement may load arbitrary dylibs
     4        https://bugs.webkit.org/show_bug.cgi?id=156668
     5        <rdar://problem/25429784>
     6
     7        Reviewed by Anders Carlsson.
     8
     9        * Configurations/WebContentService.xcconfig: Enable library validation when the Web Content
     10          service is given the XPC domain extension entitlement.
     11
    1122016-04-15  Dan Bernstein  <mitz@apple.com>
    213

  • trunk/Source/WebKit2/Configurations/WebContentService.xcconfig

    r198089 r199628  
    2828CODE_SIGN_ENTITLEMENTS[sdk=macosx*] = $(CODE_SIGN_ENTITLEMENTS_OSX_WITH_XPC_DOMAIN_EXTENSION_$(WK_WEBCONTENT_SERVICE_NEEDS_XPC_DOMAIN_EXTENSION_ENTITLEMENT));
    2929CODE_SIGN_ENTITLEMENTS_OSX_WITH_XPC_DOMAIN_EXTENSION_YES = Configurations/WebContent-OSX.entitlements;
     30OTHER_CODE_SIGN_FLAGS[sdk=macosx*] = $(WK_XPC_DOMAIN_EXTENSION_CODE_SIGN_FLAGS);
    3031
    3132PRODUCT_NAME = com.apple.WebKit.WebContent$(WK_XPC_SERVICE_SUFFIX);
    … …  
    4142WK_WEBCONTENT_SERVICE_NEEDS_XPC_DOMAIN_EXTENSION_ENTITLEMENT_NO = $(WK_WEBCONTENT_SERVICE_NEEDS_XPC_DOMAIN_EXTENSION_ENTITLEMENT);
    4243WK_WEBCONTENT_SERVICE_NEEDS_XPC_DOMAIN_EXTENSION_ENTITLEMENT_YES = $(WK_RELOCATABLE_FRAMEWORKS);
     44
     45WK_XPC_DOMAIN_EXTENSION_CODE_SIGN_FLAGS = $(WK_XPC_DOMAIN_EXTENSION_CODE_SIGN_FLAGS_$(WK_WEBCONTENT_SERVICE_NEEDS_XPC_DOMAIN_EXTENSION_ENTITLEMENT));
     46WK_XPC_DOMAIN_EXTENSION_CODE_SIGN_FLAGS_YES = -o library;
Note: See TracChangeset for help on using the changeset viewer.