Changeset 256450 in webkit


Ignore:
Timestamp:
Feb 12, 2020 10:40:04 AM (4 years ago)
Author:
pvollan@apple.com
Message:

[iOS] Deny mach lookup access to view service in the WebContent process
​https://bugs.webkit.org/show_bug.cgi?id=207487
Source/WebKit:

<rdar://problem/56995704>

Reviewed by Darin Adler.

As part of sandbox hardening, mach lookup access to com.apple.uikit.viewservice should be denied.

Test: fast/sandbox/ios/sandbox-mach-lookup.html

  • Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

LayoutTests:

Reviewed by Darin Adler.

  • fast/sandbox/ios/sandbox-mach-lookup-expected.txt:
  • fast/sandbox/ios/sandbox-mach-lookup.html:
Location:
trunk
Files:
5 edited

Legend:

Unmodified
Added
Removed

  • trunk/LayoutTests/ChangeLog

    r256449 r256450  
     12020-02-12  Per Arne Vollan  <pvollan@apple.com>
     2
     3        [iOS] Deny mach lookup access to view service in the WebContent process
     4        https://bugs.webkit.org/show_bug.cgi?id=207487
     5
     6        Reviewed by Darin Adler.
     7
     8        * fast/sandbox/ios/sandbox-mach-lookup-expected.txt:
     9        * fast/sandbox/ios/sandbox-mach-lookup.html:
     10
    1112020-02-12  Jacob Uphoff  <jacob_uphoff@apple.com>
    212

  • trunk/LayoutTests/fast/sandbox/ios/sandbox-mach-lookup-expected.txt

    r256371 r256450  
    1919PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.aggregated") is false
    2020PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.tccd") is false
     21PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.uikit.viewservice") is false

  • trunk/LayoutTests/fast/sandbox/ios/sandbox-mach-lookup.html

    r256371 r256450  
    2222    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.aggregated\")");
    2323    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.tccd\")");
     24    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.uikit.viewservice\")");
    2425}
    2526</script>

  • trunk/Source/WebKit/ChangeLog

    r256444 r256450  
     12020-02-12  Per Arne Vollan  <pvollan@apple.com>
     2
     3        [iOS] Deny mach lookup access to view service in the WebContent process
     4        https://bugs.webkit.org/show_bug.cgi?id=207487
     5        <rdar://problem/56995704>
     6       
     7        Reviewed by Darin Adler.
     8
     9        As part of sandbox hardening, mach lookup access to com.apple.uikit.viewservice should be denied.
     10
     11        Test: fast/sandbox/ios/sandbox-mach-lookup.html
     12
     13        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
     14
    1152020-02-12  Alex Christensen  <achristensen@webkit.org>
    216

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

    r256439 r256450  
    422422    (allow mach-lookup
    423423        (global-name "com.apple.CARenderServer"))
    424 
    425     (allow mach-lookup (with report) (with telemetry)
    426         (global-name-regex #"^com\.apple\.uikit\.viewservice\..+")
    427     )
    428424
    429425    ; UIKit-required IOKit nodes.
Note: See TracChangeset for help on using the changeset viewer.