Changeset 251897 in webkit

Timestamp:

Oct 31, 2019 5:31:57 PM (4 years ago)

Author:

pvollan@apple.com

Message:

[iOS] Fix mach lookup sandbox violations in the Mail app
​https://bugs.webkit.org/show_bug.cgi?id=203697

Reviewed by Alexey Proskuryakov.

Allow mach lookup to the services "com.apple.logd.events" and "com.apple.distributed_notifications@1v3",
which are seen when running the Mail application. Also allow "com.apple.aggregated", which was previously
allowed, and is showing up in reports.

• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (modified) (1 diff)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2019-10-31  Per Arne Vollan  <pvollan@apple.com>
+
+        [iOS] Fix mach lookup sandbox violations in the Mail app
+        https://bugs.webkit.org/show_bug.cgi?id=203697
+
+        Reviewed by Alexey Proskuryakov.
+
+        Allow mach lookup to the services "com.apple.logd.events" and "com.apple.distributed_notifications@1v3",
+        which are seen when running the Mail application. Also allow "com.apple.aggregated", which was previously
+        allowed, and is showing up in reports.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2019-10-31  Tim Horton  <timothy_horton@apple.com>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

@@ -610 +610 @@
 
 (allow mach-lookup
-    (global-name "com.apple.logd"))
-
-(deny mach-lookup (with send-signal SIGKILL)
-    (global-name "com.apple.logd.events"))
-
-(allow mach-lookup
+    (global-name "com.apple.logd")
+    (global-name "com.apple.logd.events")
+    (global-name "com.apple.distributed_notifications@1v3")
+    (global-name "com.apple.aggregated")
     (global-name "com.apple.cfprefsd.daemon"))