Changeset 254376 in webkit


Ignore:
Timestamp:
Jan 10, 2020 4:00:10 PM (4 years ago)
Author:
Brent Fulgham
Message:

[iOS] Remove 'com.apple.awdd' from the WebContent process sandbox
​https://bugs.webkit.org/show_bug.cgi?id=206095
<rdar://problem/56871147>

Reviewed by Per Arne Vollan.

We no longer need access to 'com.apple.awdd' in the iOS WebContent sandbox. We should remove
it from the sandbox.

Source/WebKit:

Test: fast/sandbox/ios/sandbox-mach-lookup.html

  • Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

LayoutTests:

  • fast/sandbox/ios/sandbox-mach-lookup-expected.txt:
  • fast/sandbox/ios/sandbox-mach-lookup.html:
Location:
trunk
Files:
5 edited

Legend:

Unmodified
Added
Removed

  • trunk/LayoutTests/ChangeLog

    r254373 r254376  
     12020-01-10  Brent Fulgham  <bfulgham@apple.com>
     2
     3        [iOS] Remove 'com.apple.awdd' from the WebContent process sandbox
     4        https://bugs.webkit.org/show_bug.cgi?id=206095
     5        <rdar://problem/56871147>
     6
     7        Reviewed by Per Arne Vollan.
     8
     9        We no longer need access to 'com.apple.awdd' in the iOS WebContent sandbox. We should remove
     10        it from the sandbox.
     11
     12        * fast/sandbox/ios/sandbox-mach-lookup-expected.txt:
     13        * fast/sandbox/ios/sandbox-mach-lookup.html:
     14
    1152020-01-09  Per Arne Vollan  <pvollan@apple.com>
    216

  • trunk/LayoutTests/fast/sandbox/ios/sandbox-mach-lookup-expected.txt

    r254366 r254376  
    77PASS internals.hasSandboxMachLookupAccessToXPCServiceName("com.apple.WebKit.WebContent", "com.apple.viewservice") is false
    88PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.TextInput") is false
     9PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.awdd") is false
    910PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.cookied") is false
    1011PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.iohideventsystem") is false

  • trunk/LayoutTests/fast/sandbox/ios/sandbox-mach-lookup.html

    r254366 r254376  
    1010    shouldBeFalse("internals.hasSandboxMachLookupAccessToXPCServiceName(\"com.apple.WebKit.WebContent\", \"com.apple.viewservice\")");
    1111    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.TextInput\")");
     12    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.awdd\")");
    1213    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.cookied\")");
    1314    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.iohideventsystem\")");

  • trunk/Source/WebKit/ChangeLog

    r254373 r254376  
     12020-01-10  Brent Fulgham  <bfulgham@apple.com>
     2
     3        [iOS] Remove 'com.apple.awdd' from the WebContent process sandbox
     4        https://bugs.webkit.org/show_bug.cgi?id=206095
     5        <rdar://problem/56871147>
     6
     7        Reviewed by Per Arne Vollan.
     8
     9        We no longer need access to 'com.apple.awdd' in the iOS WebContent sandbox. We should remove
     10        it from the sandbox.
     11
     12        Test: fast/sandbox/ios/sandbox-mach-lookup.html
     13
     14        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
     15
    1162020-01-09  Per Arne Vollan  <pvollan@apple.com>
    217

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

    r254366 r254376  
    365365        (allow file-read* file-write*
    366366            (prefix (string-append base-directory "/awd-" daemon-name ".log")))
    367         (allow mach-lookup (with report) (with telemetry)
    368                (global-name "com.apple.awdd"))))
     367))
    369368
    370369(define-once (logd-diagnostic-paths)
Note: See TracChangeset for help on using the changeset viewer.