Changeset 259469 in webkit


Ignore:
Timestamp:
Apr 3, 2020 10:37:46 AM (4 years ago)
Author:
pvollan@apple.com
Message:

[iOS] Deny mach lookup access to the runningboard service in the WebContent process
​https://bugs.webkit.org/show_bug.cgi?id=209933
Source/WebKit:

<rdar://problem/56995639>

Reviewed by Brent Fulgham.

On iOS, after <​https://trac.webkit.org/changeset/258180/webkit>, mach lookup access to "com.apple.runningboard"
can be denied in the WebContent process.

Test: fast/sandbox/ios/sandbox-mach-lookup.html

  • Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

LayoutTests:

Reviewed by Brent Fulgham.

  • fast/sandbox/ios/sandbox-mach-lookup-expected.txt:
  • fast/sandbox/ios/sandbox-mach-lookup.html:
Location:
trunk
Files:
5 edited

Legend:

Unmodified
Added
Removed

  • trunk/LayoutTests/ChangeLog

    r259462 r259469  
     12020-04-03  Per Arne Vollan  <pvollan@apple.com>
     2
     3        [iOS] Deny mach lookup access to the runningboard service in the WebContent process
     4        https://bugs.webkit.org/show_bug.cgi?id=209933
     5
     6        Reviewed by Brent Fulgham.
     7
     8        * fast/sandbox/ios/sandbox-mach-lookup-expected.txt:
     9        * fast/sandbox/ios/sandbox-mach-lookup.html:
     10
    1112020-04-03  Sihui Liu  <sihui_liu@apple.com>
    212

  • trunk/LayoutTests/fast/sandbox/ios/sandbox-mach-lookup-expected.txt

    r259052 r259469  
    2828PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.lsd.mapdb") is false
    2929PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.frontboard.systemappservices") is false
     30PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.runningboard") is false

  • trunk/LayoutTests/fast/sandbox/ios/sandbox-mach-lookup.html

    r259052 r259469  
    3131    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.lsd.mapdb\")");
    3232    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.frontboard.systemappservices\")");
     33    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.runningboard\")");
    3334}
    3435</script>

  • trunk/Source/WebKit/ChangeLog

    r259468 r259469  
     12020-04-03  Per Arne Vollan  <pvollan@apple.com>
     2
     3        [iOS] Deny mach lookup access to the runningboard service in the WebContent process
     4        https://bugs.webkit.org/show_bug.cgi?id=209933
     5        <rdar://problem/56995639>
     6
     7        Reviewed by Brent Fulgham.
     8
     9        On iOS, after <https://trac.webkit.org/changeset/258180/webkit>, mach lookup access to "com.apple.runningboard"
     10        can be denied in the WebContent process.
     11
     12        Test: fast/sandbox/ios/sandbox-mach-lookup.html
     13
     14        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
     15
    1162020-04-03  Diego Pino Garcia  <dpino@igalia.com>
    217

  • trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

    r259410 r259469  
    553553    (allow ipc-posix-sem-open))
    554554
    555 (allow mach-lookup (with telemetry)
    556     (global-name "com.apple.runningboard") ;; Needed by process assertion code (ProcessTaskStateObserver).
     555(deny mach-lookup (with telemetry-backtrace)
     556    (global-name "com.apple.runningboard")
    557557)
    558558
Note: See TracChangeset for help on using the changeset viewer.