Changeset 258845 in webkit


Ignore:
Timestamp:
Mar 23, 2020 8:35:42 AM (4 years ago)
Author:
pvollan@apple.com
Message:

[iOS] Deny mach lookup access to icon services
​https://bugs.webkit.org/show_bug.cgi?id=209340

Reviewed by Brent Fulgham.

Source/WebKit:

Tested by fast/sandbox/ios/sandbox-mach-lookup.html

  • Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

LayoutTests:

  • fast/sandbox/ios/sandbox-mach-lookup-expected.txt:
  • fast/sandbox/ios/sandbox-mach-lookup.html:
Location:
trunk
Files:
5 edited

Legend:

Unmodified
Added
Removed

  • trunk/LayoutTests/ChangeLog

    r258841 r258845  
     12020-03-23  Per Arne Vollan  <pvollan@apple.com>
     2
     3        [iOS] Deny mach lookup access to icon services
     4        https://bugs.webkit.org/show_bug.cgi?id=209340
     5
     6        Reviewed by Brent Fulgham.
     7
     8        * fast/sandbox/ios/sandbox-mach-lookup-expected.txt:
     9        * fast/sandbox/ios/sandbox-mach-lookup.html:
     10
    1112020-03-23  Jacob Uphoff  <jacob_uphoff@apple.com>
    212

  • trunk/LayoutTests/fast/sandbox/ios/sandbox-mach-lookup-expected.txt

    r258841 r258845  
    2525PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.mobileassetd") is false
    2626PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.mobileassetd.v2") is false
     27PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.iconservices") is false

  • trunk/LayoutTests/fast/sandbox/ios/sandbox-mach-lookup.html

    r258841 r258845  
    2828    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.mobileassetd\")");
    2929    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.mobileassetd.v2\")");
     30    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.iconservices\")");
    3031}
    3132</script>

  • trunk/Source/WebKit/ChangeLog

    r258841 r258845  
     12020-03-23  Per Arne Vollan  <pvollan@apple.com>
     2
     3        [iOS] Deny mach lookup access to icon services
     4        https://bugs.webkit.org/show_bug.cgi?id=209340
     5
     6        Reviewed by Brent Fulgham.
     7
     8        Tested by fast/sandbox/ios/sandbox-mach-lookup.html
     9
     10        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
     11
    1122020-03-23  Jacob Uphoff  <jacob_uphoff@apple.com>
    213

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

    r258841 r258845  
    672672(allow file-read*
    673673    (well-known-system-group-container-subpath "/systemgroup.com.apple.lsd.iconscache"))
    674 (allow mach-lookup (with telemetry-backtrace)
     674(deny mach-lookup (with telemetry-backtrace)
    675675    (xpc-service-name "com.apple.iconservices")
    676676    (global-name "com.apple.iconservices"))
Note: See TracChangeset for help on using the changeset viewer.