Context Navigation

Changeset 232097 in webkit

Timestamp:

May 22, 2018 7:23:57 PM (6 years ago)

Author:

Brent Fulgham

Message:

Close access to "lsopen" for non-UI process
https://bugs.webkit.org/show_bug.cgi?id=185890
<rdar://problem/39686511>

Reviewed by Alexey Proskuryakov.

Close down access to 'lsopen' in the iOS sandboxes. These operations are
performed by the UIProcess on behalf of these helper processes.

Location:

trunk/Source/WebKit

Files:

-                      r232090
+                      r232097
+-05-22  Brent Fulgham  <bfulgham@apple.com>
+        Close access to "lsopen" for non-UI process
+        https://bugs.webkit.org/show_bug.cgi?id=185890
+        <rdar://problem/39686511>
+        Reviewed by Alexey Proskuryakov.
+        Close down access to 'lsopen' in the iOS sandboxes. These operations are
+        performed by the UIProcess on behalf of these helper processes.
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Storage.sb:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
 -05-22  Dean Jackson  <dino@apple.com>

r227939	r232097
30	30	(import "common.sb")
31	31
	32	(deny lsopen)
	33
32	34	(allow file-read* file-write* (extension "com.apple.app-sandbox.read-write"))
33	35

r232072	r232097
30	30	(import "common.sb")
31	31
	32	(deny lsopen)
	33
32	34	;;;
33	35	;;; The following rules were originally contained in 'UIKit-apps.sb'. We are duplicating them here so we can

Note: See TracChangeset for help on using the changeset viewer.