Changeset 251566 in webkit

Timestamp:

Oct 24, 2019 3:14:01 PM (5 years ago)

Author:

Brent Fulgham

Message:

[iOS] Mismatch in com.apple.coremedia.audiodeviceclock declarations
​https://bugs.webkit.org/show_bug.cgi?id=203367
<rdar://problem/56581166>

Reviewed by Per Arne Vollan.

The 'common.sb' sandbox allows access to "com.apple.coremedia.audiodeviceclock.xpc", but
the WebContent sandbox blocked access to "com.apple.coremedia.audiodeviceclock". This means
we aren't blocking that endpoint.

• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (modified) (2 diffs)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2019-10-24  Brent Fulgham  <bfulgham@apple.com>
+
+        [iOS] Mismatch in com.apple.coremedia.audiodeviceclock declarations
+        https://bugs.webkit.org/show_bug.cgi?id=203367
+        <rdar://problem/56581166>
+
+        Reviewed by Per Arne Vollan.
+
+        The 'common.sb' sandbox allows access to "com.apple.coremedia.audiodeviceclock.xpc", but
+        the WebContent sandbox blocked access to "com.apple.coremedia.audiodeviceclock". This means
+        we aren't blocking that endpoint.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2019-10-24  Brent Fulgham  <bfulgham@apple.com>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

@@ -150 +150 @@
            (global-name "com.apple.coremedia.asset.xpc")
            (global-name "com.apple.coremedia.assetimagegenerator.xpc")
-           (global-name "com.apple.coremedia.audiodeviceclock.xpc")
            (global-name "com.apple.coremedia.audioprocessingtap.xpc")
            (global-name "com.apple.coremedia.capturesession")      ; Actually for video capture
@@ -916 +915 @@
 ;; established, see https://bugs.webkit.org/show_bug.cgi?id=193840
 (deny mach-lookup
-    (global-name "com.apple.coremedia.audiodeviceclock")
     (global-name "com.apple.webkit.camera")
 )