Changeset 86608 in webkit

Timestamp:

May 16, 2011 2:37:50 PM (13 years ago)

Author:

mjs@apple.com

Message:

2011-05-16 Maciej Stachowiak <​mjs@apple.com>

Reviewed by Sam Weinig.

Sandbox denies Kerberos authentication
​https://bugs.webkit.org/show_bug.cgi?id=60921
<rdar://problem/9133872>

• WebProcess/com.apple.WebProcess.sb:

Location:

trunk/Source/WebKit2

Files:

• ChangeLog (modified) (1 diff)
• WebProcess/com.apple.WebProcess.sb (modified) (1 diff)

trunk/Source/WebKit2/ChangeLog

@@ +1 @@
+2011-05-16  Maciej Stachowiak  <mjs@apple.com>
+
+        Reviewed by Sam Weinig.
+
+        Sandbox denies Kerberos authentication
+        https://bugs.webkit.org/show_bug.cgi?id=60921
+        <rdar://problem/9133872>
+        
+        * WebProcess/com.apple.WebProcess.sb:
+
 2011-05-16  David Kilzer  <ddkilzer@apple.com>
 

trunk/Source/WebKit2/WebProcess/com.apple.WebProcess.sb

@@ -180 +180 @@
        (home-literal "/Library/Preferences/com.apple.Safari.RSS.plist")
        (home-literal "/Library/Preferences/com.apple.Syndication.plist"))
+
+;; FIXME should be removed when <rdar://problem/9347205> + related radar in Safari is fixed
+(allow mach-lookup
+       (global-name "org.h5l.kcm")
+       (global-name "com.apple.system.logger")
+       (global-name "com.apple.system.notification_center"))
+(allow network-outbound
+       (remote udp))
+(allow file-read*
+        (literal (string-append (param "HOME_DIR") "/Library/Preferences/com.apple.Kerberos.plist"))
+        (literal (string-append (param "HOME_DIR") "/Library/Preferences/com.apple.GSS.plist"))
+        (literal (string-append (param "HOME_DIR") "/Library/Preferences/edu.mit.Kerberos"))
+        (literal "/Library/Preferences/com.apple.Kerberos.plist")
+        (literal "/Library/Preferences/com.apple.GSS.plist")
+        (literal "/Library/Preferences/edu.mit.Kerberos")
+        (literal "/private/etc/krb5.conf")
+        (literal "/private/etc/services")
+        (literal "/private/etc/host"))