Changeset 221647 in webkit


Ignore:
Timestamp:
Sep 5, 2017 4:36:59 PM (7 years ago)
Author:
Brent Fulgham
Message:

Relax keychain access to permit users to permanently allow client certificates
​https://bugs.webkit.org/show_bug.cgi?id=175857
<rdar://problem/32293867>

Reviewed by Alex Christensen.

Further relax the write permissions on the user's Keychain directory to support local certificates.

  • NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
  • WebProcess/com.apple.WebProcess.sb.in:
Location:
trunk/Source/WebKit
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • trunk/Source/WebKit/ChangeLog

    r221633 r221647  
     12017-09-05  Brent Fulgham  <bfulgham@apple.com>
     2
     3        Relax keychain access to permit users to permanently allow client certificates
     4        https://bugs.webkit.org/show_bug.cgi?id=175857
     5        <rdar://problem/32293867>
     6
     7        Reviewed by Alex Christensen.
     8
     9        Further relax the write permissions on the user's Keychain directory to support local certificates.
     10
     11        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
     12        * WebProcess/com.apple.WebProcess.sb.in:
     13
    1142017-09-05  Youenn Fablet  <youenn@apple.com>
    215

  • trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in

    r221061 r221647  
    166166;; FIXME: This should be removed when <rdar://problem/10479685> is fixed.
    167167;; Restrict AppSandboxed processes from creating /Library/Keychains, but allow access to the contents of /Library/Keychains:
    168 (allow file-read-data file-read-metadata file-write-create file-write-data
     168(allow file-read-data file-read-metadata file-write*
    169169    (subpath "/Library/Keychains")
    170170    (home-subpath "/Library/Keychains"))

  • trunk/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

    r221061 r221647  
    431431;; FIXME: This should be removed when <rdar://problem/10479685> is fixed.
    432432;; Restrict AppSandboxed processes from creating /Library/Keychains, but allow access to the contents of /Library/Keychains:
    433 (allow file-read-data file-read-metadata file-write-create file-write-data
     433(allow file-read-data file-read-metadata file-write*
    434434    (subpath "/Library/Keychains"))
    435435
Note: See TracChangeset for help on using the changeset viewer.