Changeset 255072 in webkit

Timestamp:

Jan 24, 2020 7:58:45 AM (4 years ago)

Author:

Brent Fulgham

Message:

[iOS] Add missing sysctl-read permission (already available in macOS sandbox)
​https://bugs.webkit.org/show_bug.cgi?id=206713
<rdar://problem/57665153>

Reviewed by Per Arne Vollan.

Correct a sandbox violation encountered when attempting to log the system hostname.
This was already handled properly on macOS, but the rule was not added to the iOS sandbox.

• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (modified) (1 diff)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2020-01-24  Brent Fulgham  <bfulgham@apple.com>
+
+        [iOS] Add missing sysctl-read permission (already available in macOS sandbox)
+        https://bugs.webkit.org/show_bug.cgi?id=206713
+        <rdar://problem/57665153>
+
+        Reviewed by Per Arne Vollan.
+
+        Correct a sandbox violation encountered when attempting to log the system hostname.
+        This was already handled properly on macOS, but the rule was not added to the iOS sandbox.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2020-01-24  Adrian Perez de Castro  <aperez@igalia.com>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

@@ -817 +817 @@
         "kern.secure_kernel" ;; Needed by XPC bundle resolution
         "kern.version"
-        "vm.footprint_suspend"))
+        "vm.footprint_suspend")
+    (sysctl-name-regex #"^net.routetable") ;; <rdar://problem/57665153>
+)
 
 (allow iokit-get-properties