Changeset 256399 in webkit

Timestamp:

Feb 11, 2020 4:47:35 PM (4 years ago)

Author:

Brent Fulgham

Message:

[iOS] Deny access to unused tcp service from NetworkProcess
​https://bugs.webkit.org/show_bug.cgi?id=207590
<rdar://problem/57895351>

Reviewed by Darin Adler.

• Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:

Location:

trunk/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb (modified) (1 diff)

trunk/Source/WebKit/ChangeLog

@@ +1 @@
+2020-02-11  Brent Fulgham  <bfulgham@apple.com>
+
+        [iOS] Deny access to unused tcp service from NetworkProcess
+        https://bugs.webkit.org/show_bug.cgi?id=207590
+        <rdar://problem/57895351>
+
+        Reviewed by Darin Adler.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+
 2020-02-11  Chris Dumez  <cdumez@apple.com>
 

trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb

@@ -633 +633 @@
     (remote tcp))
 
+;;; <rdar://problem/9876970>
+(deny network-outbound
+      (remote tcp "localhost:62078"))
+
 ;; Various services required by system frameworks
 (allow mach-lookup (with report) (with telemetry)