Changeset 83148 in webkit
- Timestamp:
- Apr 7, 2011 12:39:24 AM (13 years ago)
- Location:
- trunk/Source/WebKit2
- Files:
-
- 2 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/Source/WebKit2/ChangeLog
r83139 r83148 1 2011-04-07 Maciej Stachowiak <mjs@apple.com> 2 3 Reviewed by Dan Bernstein. 4 5 Remove some no longer needed WebProcess sandbox allowances 6 https://bugs.webkit.org/show_bug.cgi?id=58015 7 <rdar://problem/9232592> 8 9 * WebProcess/com.apple.WebProcess.sb: Remove no-longer needed extra network 10 and launching privileges, since the bugs that required them are fixed. 11 1 12 2011-04-06 Chang Shu <cshu@webkit.org> 2 13 -
trunk/Source/WebKit2/WebProcess/com.apple.WebProcess.sb
r82980 r83148 133 133 ) 134 134 135 ;; FIXME: These rules are required until <rdar://problem/8448410> is addressed. See <rdar://problem/8349882> for discussion.136 (allow network-outbound)137 (deny network-outbound (regex ""))138 (deny network-outbound (local ip))139 135 (allow network-outbound 140 136 ;; Local mDNSResponder for DNS, arbitrary outbound TCP … … 158 154 (allow network-outbound (remote ip)) 159 155 160 ;; These rules are required while QTKitServer is being launched directly via posix_spawn (<rdar://problem/6912494>).161 (allow process-fork)162 (allow process-exec (literal "/System/Library/Frameworks/QTKit.framework/Versions/A/Resources/QTKitServer") (with no-sandbox))163 164 156 ;; FIXME: Once <rdar://problem/8900275> has been fixed, these rules can be removed. 165 157 (allow mach-lookup (global-name "com.apple.pubsub.ipc"))
Note: See TracChangeset
for help on using the changeset viewer.