Changeset 232436 in webkit

Timestamp:

Jun 2, 2018 8:59:53 AM (6 years ago)

Author:

youenn@apple.com

Message:

Add a sandbox profile for com.cisco.webex.plugin.gpc64 plugin
​https://bugs.webkit.org/show_bug.cgi?id=186110

Reviewed by Brent Fulgham.

• PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in: Webex needs to create some symlinks.
• Resources/PlugInSandboxProfiles/com.cisco.webex.plugin.gpc64.sb: Added.
• WebKit.xcodeproj/project.pbxproj:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in (modified) (1 diff)
• Resources/PlugInSandboxProfiles/com.cisco.webex.plugin.gpc64.sb (added)
• WebKit.xcodeproj/project.pbxproj (modified) (5 diffs)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2018-06-02  Youenn Fablet  <youenn@apple.com>
+
+        Add a sandbox profile for com.cisco.webex.plugin.gpc64 plugin
+        https://bugs.webkit.org/show_bug.cgi?id=186110
+
+        Reviewed by Brent Fulgham.
+
+        * PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in: Webex needs to create some symlinks.
+        * Resources/PlugInSandboxProfiles/com.cisco.webex.plugin.gpc64.sb: Added.
+        * WebKit.xcodeproj/project.pbxproj:
+
 2018-06-01  Wenson Hsieh  <wenson_hsieh@apple.com>
 

trunk/Source/WebKit/PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in

@@ -529 +529 @@
     (webkit-%finalize
         (lambda ()
-            (if (defined? 'vnode-type)
-                (deny file-write-create
-                      (vnode-type SYMLINK)))
+            (if (not (defined? 'allow-symlinks))
+                (if (defined? 'vnode-type)
+                    (deny file-write-create
+                        (vnode-type SYMLINK))))
             ;; Reserve a namespace for additional protected extended attributes.
             (deny file-read-xattr file-write-xattr (xattr #"^com\.apple\.security\.private\."))

trunk/Source/WebKit/WebKit.xcodeproj/project.pbxproj

@@ -929 +929 @@
                 4131F3E21F9880840059995A /* WebServiceWorkerFetchTaskClient.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 4131F3E01F98712C0059995A /* WebServiceWorkerFetchTaskClient.cpp */; };
                 4135FBD11F4FB8090074C47B /* CacheStorageEngineCaches.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 4135FBCF1F4FB7F20074C47B /* CacheStorageEngineCaches.cpp */; };
+                414DD37920BF43F5006959FB /* com.cisco.webex.plugin.gpc64.sb in Resources */ = {isa = PBXBuildFile; fileRef = 414DD37820BF43EA006959FB /* com.cisco.webex.plugin.gpc64.sb */; };
+                414DD37A20BF49A5006959FB /* com.cisco.webex.plugin.gpc64.sb in Copy Plug-in Sandbox Profiles */ = {isa = PBXBuildFile; fileRef = 414DD37820BF43EA006959FB /* com.cisco.webex.plugin.gpc64.sb */; };
                 414DEDD71F9EDDE50047C40D /* ServiceWorkerProcessProxy.h in Headers */ = {isa = PBXBuildFile; fileRef = 414DEDD51F9EDDDF0047C40D /* ServiceWorkerProcessProxy.h */; };
                 414DEDD81F9EDDE50047C40D /* ServiceWorkerProcessProxy.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 414DEDD61F9EDDE00047C40D /* ServiceWorkerProcessProxy.cpp */; };
@@ -2334 +2336 @@
                                 7CB16FF01724BA24007A0A95 /* com.apple.QuickTime Plugin.plugin.sb in Copy Plug-in Sandbox Profiles */,
                                 7A772C8D1DDD4A25000F34F1 /* com.apple.WebKit.plugin-common.sb in Copy Plug-in Sandbox Profiles */,
+                                414DD37A20BF49A5006959FB /* com.cisco.webex.plugin.gpc64.sb in Copy Plug-in Sandbox Profiles */,
                                 A102A7081EC0EEE900D81D82 /* com.macromedia.Flash Player ESR.plugin.sb in Copy Plug-in Sandbox Profiles */,
                                 7CB16FF21724BA28007A0A95 /* com.macromedia.Flash Player.plugin.sb in Copy Plug-in Sandbox Profiles */,
@@ -3315 +3318 @@
                 4135FBCF1F4FB7F20074C47B /* CacheStorageEngineCaches.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = CacheStorageEngineCaches.cpp; sourceTree = "<group>"; };
                 4135FBD01F4FB7F20074C47B /* CacheStorageEngineCaches.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = CacheStorageEngineCaches.h; sourceTree = "<group>"; };
+                414DD37820BF43EA006959FB /* com.cisco.webex.plugin.gpc64.sb */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; path = com.cisco.webex.plugin.gpc64.sb; sourceTree = "<group>"; };
                 414DEDD51F9EDDDF0047C40D /* ServiceWorkerProcessProxy.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = ServiceWorkerProcessProxy.h; sourceTree = "<group>"; };
                 414DEDD61F9EDDE00047C40D /* ServiceWorkerProcessProxy.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = ServiceWorkerProcessProxy.cpp; sourceTree = "<group>"; };
@@ -6930 +6934 @@
                                 7CB16FE21724B9B5007A0A95 /* com.apple.ist.ds.appleconnect.webplugin.sb */,
                                 7CB16FE31724B9B5007A0A95 /* com.apple.QuickTime Plugin.plugin.sb */,
+                                414DD37820BF43EA006959FB /* com.cisco.webex.plugin.gpc64.sb */,
                                 7A5E39491D5BD8A700B4B7CE /* com.macromedia.Flash Player ESR.plugin.sb */,
                                 7CB16FE51724B9B5007A0A95 /* com.macromedia.Flash Player.plugin.sb */,
@@ -10084 +10089 @@
                                 E115C716190F8A2500ECC516 /* com.apple.WebKit.Storage.sb in Resources */,
                                 E11D35AE16B63D1B006D23D7 /* com.apple.WebProcess.sb in Resources */,
+                                414DD37920BF43F5006959FB /* com.cisco.webex.plugin.gpc64.sb in Resources */,
                                 6BE969C11E54D452008B7483 /* corePrediction_model in Resources */,
                                 8DC2EF530486A6940098B216 /* InfoPlist.strings in Resources */,