Changeset 149913 in webkit

Timestamp:

May 10, 2013 4:42:07 PM (11 years ago)

Author:

commit-queue@webkit.org

Message:

Fix AppleConnect issues for WiFi interfaces
<rdar://problem/13776227&13776240&13776281>
​https://bugs.webkit.org/show_bug.cgi?id=115932

Patch by Simon Cooper <​scooper@apple.com> on 2013-05-10
Reviewed by Alexey Proskuryakov.

Add support for WiFi interfaces for the AppleConnect plugin.
Remove the FIXME.

• Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb:

Location:

trunk/Source/WebKit2

Files:

• ChangeLog (modified) (1 diff)
• Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb (modified) (3 diffs)

trunk/Source/WebKit2/ChangeLog

@@ +1 @@
+2013-05-10  Simon Cooper  <scooper@apple.com>
+
+        Fix AppleConnect issues for WiFi interfaces
+        <rdar://problem/13776227&13776240&13776281>
+        https://bugs.webkit.org/show_bug.cgi?id=115932
+
+        Reviewed by Alexey Proskuryakov.
+
+        Add support for WiFi interfaces for the AppleConnect plugin.
+        Remove the FIXME.
+
+        * Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb:
+
 2013-05-10  Zoltan Arvai  <zarvai@inf.u-szeged.hu>
 

trunk/Source/WebKit2/Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb

@@ -4 +4 @@
     (global-name "com.apple.ist.ds.appleconnect2.service.kdctunnelcontroller")
     (global-name "com.apple.ist.ds.appleconnect2.service.menuextra")
+    (global-name "com.apple.wifi.anqp")
     (global-name "org.h5l.kcm"))
-;; FIXME: This is explicitly being called out <rdar://problem/13481170>
-(deny mach-lookup
-    (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\..*\[[0-9]+\]$"))
 (allow mach-lookup
     (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\.PluginProcess\[[0-9]+\]$"))
@@ -23 +21 @@
     (subpath "/Library/KerberosPlugins/GSSAPI")
     (literal "/Library/Preferences/edu.mit.Kerberos")
+    (literal "/Library/Preferences/SystemConfiguration/preferences.plist")
     (home-library-preferences-literal "/edu.mit.Kerberos"))
 
@@ -32 +31 @@
         (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\.PluginProcess\[[0-9]+\]$")))
 
+(allow system-socket)
 (allow network-outbound
    (remote udp "*:4160" "*:88"))