Attachment #189321 for bug #110014

View Details Raw Unified Return to Bug 110014

| Differences between

Lines 1-5 a/Source/WebCore/ChangeLog_sec1
- a/Source/WebCore/ChangeLog +10 lines
1	2013-02-20 Thiago Marcos P. Santos <thiago.santos@intel.com>	1	2013-02-20 Thiago Marcos P. Santos <thiago.santos@intel.com>
2		2
		3	[GTK][WK2] Add seccomp filters support
		4	https://bugs.webkit.org/show_bug.cgi?id=110014
		5
		6	Reviewed by NOBODY (OOPS!).
		7
		8	* GNUmakefile.am:
		9	* GNUmakefile.features.am.in:
		10
		11	2013-02-20 Thiago Marcos P. Santos <thiago.santos@intel.com>
		12
3	[WK2] Drop WebProcess capabilities on Linux using seccomp filters	13	[WK2] Drop WebProcess capabilities on Linux using seccomp filters
4	https://bugs.webkit.org/show_bug.cgi?id=89875	14	https://bugs.webkit.org/show_bug.cgi?id=89875
5		15



2013-02-20  Thiago Marcos P. Santos  <thiago.santos@intel.com>

        [GTK][WK2] Add seccomp filters support
        https://bugs.webkit.org/show_bug.cgi?id=110014

        Reviewed by NOBODY (OOPS!).

        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * WebProcess/gtk/SeccompFiltersWebProcessGtk.cpp: Added.
        (WebKit):
        (WebKit::SeccompFiltersWebProcessGtk::SeccompFiltersWebProcessGtk):
        (WebKit::SeccompFiltersWebProcessGtk::platformInitialize):
        * WebProcess/gtk/SeccompFiltersWebProcessGtk.h: Added.
        (WebKit):
        (SeccompFiltersWebProcessGtk):
        * WebProcess/soup/WebProcessSoup.cpp:
        (WebKit::WebProcess::platformInitializeWebProcess):

2013-02-20  Thiago Marcos P. Santos  <thiago.santos@intel.com>

        [WK2] Drop WebProcess capabilities on Linux using seccomp filters
        https://bugs.webkit.org/show_bug.cgi?id=89875


Lines 147-152 feature_defines_overrides += ENABLE_GAMEPAD=0 a/Source/WebCore/GNUmakefile.am_sec1
- a/Source/WebCore/GNUmakefile.am +9 lines
147	endif # END ENABLE_GAMEPAD	147	endif # END ENABLE_GAMEPAD
148		148
149	# ----	149	# ----
		150	# Seccomp Filters support
		151	# ---
		152	if ENABLE_SECCOMP_FILTERS
		153	feature_defines_overrides += ENABLE_SECCOMP_FILTERS=1
		154	else
		155	feature_defines_overrides += ENABLE_SECCOMP_FILTERS=0
		156	endif # END ENABLE_SECCOMP_FILTERS
		157
		158	# ----
150	# Video Support	159	# Video Support
151	# ----	160	# ----
152	if ENABLE_VIDEO	161	if ENABLE_VIDEO

Lines 80-85 feature_defines_defaults += \ a/Source/WebCore/GNUmakefile.features.am.in_sec1
- a/Source/WebCore/GNUmakefile.features.am.in +1 lines
80	ENABLE_RESOURCE_TIMING=0 \	80	ENABLE_RESOURCE_TIMING=0 \
81	ENABLE_REQUEST_ANIMATION_FRAME=1 \	81	ENABLE_REQUEST_ANIMATION_FRAME=1 \
82	ENABLE_SCRIPTED_SPEECH=0 \	82	ENABLE_SCRIPTED_SPEECH=0 \
		83	ENABLE_SECCOMP_FILTERS=0 \
83	ENABLE_SHADOW_DOM=1 \	84	ENABLE_SHADOW_DOM=1 \
84	ENABLE_SHARED_WORKERS=1 \	85	ENABLE_SHARED_WORKERS=1 \
85	ENABLE_SMOOTH_SCROLLING=1 \	86	ENABLE_SMOOTH_SCROLLING=1 \

Lines 201-206 libwebkit2gtk_@WEBKITGTK_API_MAJOR_VERSION@_@WEBKITGTK_API_MINOR_VERSION@_la_LIB a/Source/WebKit2/GNUmakefile.am_sec1
- a/Source/WebKit2/GNUmakefile.am +1 lines
201	$(OPENGL_LIBS) \	201	$(OPENGL_LIBS) \
202	$(PANGO_LIBS) \	202	$(PANGO_LIBS) \
203	$(PNG_LIBS) \	203	$(PNG_LIBS) \
		204	$(SECCOMP_FILTERS_LIBS) \
204	$(SQLITE3_LIBS) \	205	$(SQLITE3_LIBS) \
205	$(UNICODE_LIBS) \	206	$(UNICODE_LIBS) \
206	$(WEBP_LIBS) \	207	$(WEBP_LIBS) \

Lines 410-415 webkit2_sources += \ a/Source/WebKit2/GNUmakefile.list.am_sec1
- a/Source/WebKit2/GNUmakefile.list.am +12 lines
410	Source/WebKit2/Shared/gtk/ProcessExecutablePathGtk.cpp \	410	Source/WebKit2/Shared/gtk/ProcessExecutablePathGtk.cpp \
411	Source/WebKit2/Shared/gtk/WebEventFactory.cpp \	411	Source/WebKit2/Shared/gtk/WebEventFactory.cpp \
412	Source/WebKit2/Shared/gtk/WebEventFactory.h \	412	Source/WebKit2/Shared/gtk/WebEventFactory.h \
		413	Source/WebKit2/Shared/linux/SeccompFilters/OpenSyscall.cpp \
		414	Source/WebKit2/Shared/linux/SeccompFilters/OpenSyscall.h \
		415	Source/WebKit2/Shared/linux/SeccompFilters/SeccompBroker.cpp \
		416	Source/WebKit2/Shared/linux/SeccompFilters/SeccompBroker.h \
		417	Source/WebKit2/Shared/linux/SeccompFilters/SeccompFilters.cpp \
		418	Source/WebKit2/Shared/linux/SeccompFilters/SeccompFilters.h \
		419	Source/WebKit2/Shared/linux/SeccompFilters/Syscall.cpp \
		420	Source/WebKit2/Shared/linux/SeccompFilters/Syscall.h \
		421	Source/WebKit2/Shared/linux/SeccompFilters/SyscallPolicy.cpp \
		422	Source/WebKit2/Shared/linux/SeccompFilters/SyscallPolicy.h \
413	Source/WebKit2/Shared/ImageOptions.h \	423	Source/WebKit2/Shared/ImageOptions.h \
414	Source/WebKit2/Shared/ImmutableArray.cpp \	424	Source/WebKit2/Shared/ImmutableArray.cpp \
415	Source/WebKit2/Shared/ImmutableArray.h \	425	Source/WebKit2/Shared/ImmutableArray.h \
Lines 989-994 webkit2_sources += \ a/Source/WebKit2/GNUmakefile.list.am_sec2
989	Source/WebKit2/WebProcess/Geolocation/GeolocationPermissionRequestManager.h \	999	Source/WebKit2/WebProcess/Geolocation/GeolocationPermissionRequestManager.h \
990	Source/WebKit2/WebProcess/Geolocation/WebGeolocationManager.cpp \	1000	Source/WebKit2/WebProcess/Geolocation/WebGeolocationManager.cpp \
991	Source/WebKit2/WebProcess/Geolocation/WebGeolocationManager.h \	1001	Source/WebKit2/WebProcess/Geolocation/WebGeolocationManager.h \
		1002	Source/WebKit2/WebProcess/gtk/SeccompFiltersWebProcessGtk.cpp \
		1003	Source/WebKit2/WebProcess/gtk/SeccompFiltersWebProcessGtk.h \
992	Source/WebKit2/WebProcess/gtk/WebGtkExtensionManager.cpp \	1004	Source/WebKit2/WebProcess/gtk/WebGtkExtensionManager.cpp \
993	Source/WebKit2/WebProcess/gtk/WebGtkExtensionManager.h \	1005	Source/WebKit2/WebProcess/gtk/WebGtkExtensionManager.h \
994	Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp \	1006	Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp \



/*
 * Copyright (C) 2013 Intel Corporation. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#include "config.h"
#include "SeccompFiltersWebProcessGtk.h"

#if ENABLE(SECCOMP_FILTERS)

#include "WebProcessCreationParameters.h"
#include <WebKit2/SeccompBroker.h>
#include <sys/types.h>
#include <unistd.h>

namespace WebKit {

SeccompFiltersWebProcessGtk::SeccompFiltersWebProcessGtk(const WebProcessCreationParameters& parameters)
    : SeccompFilters(Allow)
{
    m_policy.addDefaultWebProcessPolicy(parameters);
}

void SeccompFiltersWebProcessGtk::platformInitialize()
{
    // TODO: We should block all the syscalls and whitelist
    // what we need + trap what should be handled by the broker.
    addRule("open", Trap);
    addRule("openat", Trap);
    addRule("creat", Trap);

    SeccompBroker::launchProcess(this, m_policy);
}

} // namespace WebKit

#endif // ENABLE(SECCOMP_FILTERS)



/*
 * Copyright (C) 2013 Intel Corporation. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#ifndef SeccompFiltersWebProcessGtk_h
#define SeccompFiltersWebProcessGtk_h

#if ENABLE(SECCOMP_FILTERS)

#include <WebKit2/SeccompFilters.h>
#include <WebKit2/SyscallPolicy.h>

namespace WebKit {

class WebProcessCreationParameters;

class SeccompFiltersWebProcessGtk : public SeccompFilters {
public:
    SeccompFiltersWebProcessGtk(const WebProcessCreationParameters&);

private:
    virtual void platformInitialize();

    SyscallPolicy m_policy;
};

} // namespace WebKit

#endif // ENABLE(SECCOMP_FILTERS)

#endif // SeccompFiltersWebProcessGtk_h

Lines 31-36 a/Source/WebKit2/WebProcess/soup/WebProcessSoup.cpp_sec1
- a/Source/WebKit2/WebProcess/soup/WebProcessSoup.cpp +4 lines
31		31
32	#if PLATFORM(EFL)	32	#if PLATFORM(EFL)
33	#include "SeccompFiltersWebProcessEfl.h"	33	#include "SeccompFiltersWebProcessEfl.h"
		34	#elif PLATFORM(GTK)
		35	#include "SeccompFiltersWebProcessGtk.h"
34	#endif	36	#endif
35		37
36	#include "WebCookieManager.h"	38	#include "WebCookieManager.h"
Lines 172-177 void WebProcess::platformInitializeWebProcess(const WebProcessCreationParameters a/Source/WebKit2/WebProcess/soup/WebProcessSoup.cpp_sec2
172	{	174	{
173	#if PLATFORM(EFL)	175	#if PLATFORM(EFL)
174	SeccompFiltersWebProcessEfl seccompFilters(parameters);	176	SeccompFiltersWebProcessEfl seccompFilters(parameters);
		177	#elif PLATFORM(GTK)
		178	SeccompFiltersWebProcessGtk seccompFilters(parameters);
175	#endif	179	#endif
176	seccompFilters.initialize();	180	seccompFilters.initialize();
177	}	181	}

Lines 500-505 if test "$enable_webkit2" = "yes"; then a/Source/autotools/FindDependencies.m4_sec1
- a/Source/autotools/FindDependencies.m4 +6 lines
500	AC_SEARCH_LIBS([shm_open], [rt], [SHM_LIBS="-lrt"])	500	AC_SEARCH_LIBS([shm_open], [rt], [SHM_LIBS="-lrt"])
501	AC_SUBST(SHM_LIBS)	501	AC_SUBST(SHM_LIBS)
502	fi	502	fi
		503
		504	if test "$enable_seccomp_filters" = "yes"; then
		505	PKG_CHECK_MODULES(SECCOMP_FILTERS, libseccomp)
		506	AC_SUBST(SECCOMP_FILTERS)
		507	AC_SUBST(SECCOMP_FILTERS)
		508	fi
503	fi	509	fi
504		510
505	# We need atspi2 for Webkit2 unit tests.	511	# We need atspi2 for Webkit2 unit tests.

Lines 28-33 Features: a/Source/autotools/PrintBuildConfiguration.m4_sec1
- a/Source/autotools/PrintBuildConfiguration.m4 +1 lines
28	Web Audio support : $enable_web_audio	28	Web Audio support : $enable_web_audio
29	WebGL : $enable_webgl	29	WebGL : $enable_webgl
30	XSLT support : $enable_xslt	30	XSLT support : $enable_xslt
		31	Seccomp Filters support : $enable_seccomp_filters
31		32
32		33
33	GTK+ configuration:	34	GTK+ configuration:

Lines 82-87 AC_ARG_ENABLE(gamepad, a/Source/autotools/ReadCommandLineArguments.m4_sec1
- a/Source/autotools/ReadCommandLineArguments.m4 +7 lines
82	[enable_gamepad="no"])	82	[enable_gamepad="no"])
83	AC_MSG_RESULT([$enable_gamepad])	83	AC_MSG_RESULT([$enable_gamepad])
84		84
		85	AC_MSG_CHECKING([whether to enable Seccomp Filters support])
		86	AC_ARG_ENABLE(seccomp_filters,
		87	AC_HELP_STRING([--enable-seccomp-filters], [enable Seccomp Filters support [default=no]]),
		88	[],
		89	[enable_seccomp_filters="no"])
		90	AC_MSG_RESULT([$enable_seccomp_filters])
		91
85	AC_MSG_CHECKING([whether to enable HTML5 video support])	92	AC_MSG_CHECKING([whether to enable HTML5 video support])
86	AC_ARG_ENABLE(video,	93	AC_ARG_ENABLE(video,
87	AC_HELP_STRING([--enable-video], [enable HTML5 video support [default=yes]]),	94	AC_HELP_STRING([--enable-video], [enable HTML5 video support [default=yes]]),

Lines 66-71 AM_CONDITIONAL([ENABLE_WEBKIT2],[test "$enable_webkit2" = "yes"]) a/Source/autotools/SetupAutomake.m4_sec1
- a/Source/autotools/SetupAutomake.m4 +1 lines
66	AM_CONDITIONAL([ENABLE_SPELLCHECK],[test "$enable_spellcheck" = "yes"])	66	AM_CONDITIONAL([ENABLE_SPELLCHECK],[test "$enable_spellcheck" = "yes"])
67	AM_CONDITIONAL([ENABLE_CSS_FILTERS],[test "$enable_css_filters" = "yes"])	67	AM_CONDITIONAL([ENABLE_CSS_FILTERS],[test "$enable_css_filters" = "yes"])
68	AM_CONDITIONAL([ENABLE_CSS_SHADERS],[test "$enable_css_shaders" = "yes"])	68	AM_CONDITIONAL([ENABLE_CSS_SHADERS],[test "$enable_css_shaders" = "yes"])
		69	AM_CONDITIONAL([ENABLE_SECCOMP_FILTERS],[test "$enable_seccomp_filters" = "yes"])
69		70
70	# Introspection conditional.	71	# Introspection conditional.
71	AM_CONDITIONAL([ENABLE_INTROSPECTION],[test "$enable_introspection" = "yes"])	72	AM_CONDITIONAL([ENABLE_INTROSPECTION],[test "$enable_introspection" = "yes"])



2013-02-20  Thiago Marcos P. Santos  <thiago.santos@intel.com>

        [GTK][WK2] Add seccomp filters support
        https://bugs.webkit.org/show_bug.cgi?id=110014

        Reviewed by NOBODY (OOPS!).

        * Scripts/webkitdirs.pm:
        (buildAutotoolsProject):
        * gtk/jhbuild.modules:

2013-02-20  Thiago Marcos P. Santos  <thiago.santos@intel.com>

        [WK2] Drop WebProcess capabilities on Linux using seccomp filters
        https://bugs.webkit.org/show_bug.cgi?id=89875


Lines 2112-2117 sub buildAutotoolsProject($@) a/Tools/Scripts/webkitdirs.pm_sec1
- a/Tools/Scripts/webkitdirs.pm +1 lines
2112	"gamepad" => 1,	2112	"gamepad" => 1,
2113	"geolocation" => 1,	2113	"geolocation" => 1,
2114	"media-stream" => 1,	2114	"media-stream" => 1,
		2115	"seccomp-filters" => 1,
2115	"svg" => 1,	2116	"svg" => 1,
2116	"svg-fonts" => 1,	2117	"svg-fonts" => 1,
2117	"video" => 1,	2118	"video" => 1,

Lines 26-31 a/Tools/gtk/jhbuild.modules_sec1
- a/Tools/gtk/jhbuild.modules +9 lines
26	<dep package="gst-plugins-good"/>	26	<dep package="gst-plugins-good"/>
27	<dep package="gst-plugins-bad"/>	27	<dep package="gst-plugins-bad"/>
28	<dep package="gst-libav"/>	28	<dep package="gst-libav"/>
		29	<dep package="libseccomp"/>
29	</dependencies>	30	</dependencies>
30	</metamodule>	31	</metamodule>
31		32
Lines 49-54 a/Tools/gtk/jhbuild.modules_sec2
49	href="ftp://xmlsoft.org"/>	50	href="ftp://xmlsoft.org"/>
50	<repository type="git" name="gstreamer"	51	<repository type="git" name="gstreamer"
51	href="git://anongit.freedesktop.org/git/gstreamer/"/>	52	href="git://anongit.freedesktop.org/git/gstreamer/"/>
		53	<repository type="git" name="git.code.sf.net"
		54	href="git://git.code.sf.net/p/"/>
52		55
53	<autotools id="make" autogen-sh="configure">	56	<autotools id="make" autogen-sh="configure">
54	<branch repo="ftp.gnu.org"	57	<branch repo="ftp.gnu.org"
Lines 270-273 a/Tools/gtk/jhbuild.modules_sec3
270	<branch repo="gstreamer" module="gst-libav" checkoutdir="gst-libav" tag="1.0.4"/>	273	<branch repo="gstreamer" module="gst-libav" checkoutdir="gst-libav" tag="1.0.4"/>
271	</autotools>	274	</autotools>
272		275
		276	<autotools id="libseccomp" autogen-sh="configure">
		277	<branch module="libseccomp/libseccomp"
		278	repo="git.code.sf.net"
		279	tag="bbd7ca07a7c76d5cd884dbddec58385e1b7439d2"/>
		280	</autotools>
		281
273	</moduleset>	282	</moduleset>



2013-02-20  Thiago Marcos P. Santos  <thiago.santos@intel.com>

        [GTK][WK2] Add seccomp filters support
        https://bugs.webkit.org/show_bug.cgi?id=110014

        Reviewed by NOBODY (OOPS!).

        * Source/autotools/FindDependencies.m4:
        * Source/autotools/PrintBuildConfiguration.m4:
        * Source/autotools/ReadCommandLineArguments.m4:
        * Source/autotools/SetupAutomake.m4:

2013-02-20  Thiago Marcos P. Santos  <thiago.santos@intel.com>

        [WK2] Drop WebProcess capabilities on Linux using seccomp filters
        https://bugs.webkit.org/show_bug.cgi?id=89875


Return to Bug 110014

Lines 1-5 a/Source/WebKit2/ChangeLog_sec1
- a/Source/WebKit2/ChangeLog +19 lines
1	2013-02-20 Thiago Marcos P. Santos <thiago.santos@intel.com>	1	2013-02-20 Thiago Marcos P. Santos <thiago.santos@intel.com>
2		2
		3	[GTK][WK2] Add seccomp filters support
		4	https://bugs.webkit.org/show_bug.cgi?id=110014
		5
		6	Reviewed by NOBODY (OOPS!).
		7
		8	* GNUmakefile.am:
		9	* GNUmakefile.list.am:
		10	* WebProcess/gtk/SeccompFiltersWebProcessGtk.cpp: Added.
		11	(WebKit):
		12	(WebKit::SeccompFiltersWebProcessGtk::SeccompFiltersWebProcessGtk):
		13	(WebKit::SeccompFiltersWebProcessGtk::platformInitialize):
		14	* WebProcess/gtk/SeccompFiltersWebProcessGtk.h: Added.
		15	(WebKit):
		16	(SeccompFiltersWebProcessGtk):
		17	* WebProcess/soup/WebProcessSoup.cpp:
		18	(WebKit::WebProcess::platformInitializeWebProcess):
		19
		20	2013-02-20 Thiago Marcos P. Santos <thiago.santos@intel.com>
		21
3	[WK2] Drop WebProcess capabilities on Linux using seccomp filters	22	[WK2] Drop WebProcess capabilities on Linux using seccomp filters
4	https://bugs.webkit.org/show_bug.cgi?id=89875	23	https://bugs.webkit.org/show_bug.cgi?id=89875
5		24

Line 0 a/Source/WebKit2/WebProcess/gtk/SeccompFiltersWebProcessGtk.cpp_sec1
- a/Source/WebKit2/WebProcess/gtk/SeccompFiltersWebProcessGtk.cpp +57 lines
	1	/*
	2	* Copyright (C) 2013 Intel Corporation. All rights reserved.
	3	*
	4	* Redistribution and use in source and binary forms, with or without
	5	* modification, are permitted provided that the following conditions
	6	* are met:
	7	* 1. Redistributions of source code must retain the above copyright
	8	* notice, this list of conditions and the following disclaimer.
	9	* 2. Redistributions in binary form must reproduce the above copyright
	10	* notice, this list of conditions and the following disclaimer in the
	11	* documentation and/or other materials provided with the distribution.
	12	*
	13	* THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
	14	* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
	15	* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
	16	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
	17	* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
	18	* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
	19	* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
	20	* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
	21	* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	22	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
	23	* THE POSSIBILITY OF SUCH DAMAGE.
	24	*/
	25
	26	#include "config.h"
	27	#include "SeccompFiltersWebProcessGtk.h"
	28
	29	#if ENABLE(SECCOMP_FILTERS)
	30
	31	#include "WebProcessCreationParameters.h"
	32	#include <WebKit2/SeccompBroker.h>
	33	#include <sys/types.h>
	34	#include <unistd.h>
	35
	36	namespace WebKit {
	37
	38	SeccompFiltersWebProcessGtk::SeccompFiltersWebProcessGtk(const WebProcessCreationParameters& parameters)
	39	: SeccompFilters(Allow)
	40	{
	41	m_policy.addDefaultWebProcessPolicy(parameters);
	42	}
	43
	44	void SeccompFiltersWebProcessGtk::platformInitialize()
	45	{
	46	// TODO: We should block all the syscalls and whitelist
	47	// what we need + trap what should be handled by the broker.
	48	addRule("open", Trap);
	49	addRule("openat", Trap);
	50	addRule("creat", Trap);
	51
	52	SeccompBroker::launchProcess(this, m_policy);
	53	}
	54
	55	} // namespace WebKit
	56
	57	#endif // ENABLE(SECCOMP_FILTERS)

Lines 1-5 a/Tools/ChangeLog_sec1
- a/Tools/ChangeLog +11 lines
1	2013-02-20 Thiago Marcos P. Santos <thiago.santos@intel.com>	1	2013-02-20 Thiago Marcos P. Santos <thiago.santos@intel.com>
2		2
		3	[GTK][WK2] Add seccomp filters support
		4	https://bugs.webkit.org/show_bug.cgi?id=110014
		5
		6	Reviewed by NOBODY (OOPS!).
		7
		8	* Scripts/webkitdirs.pm:
		9	(buildAutotoolsProject):
		10	* gtk/jhbuild.modules:
		11
		12	2013-02-20 Thiago Marcos P. Santos <thiago.santos@intel.com>
		13
3	[WK2] Drop WebProcess capabilities on Linux using seccomp filters	14	[WK2] Drop WebProcess capabilities on Linux using seccomp filters
4	https://bugs.webkit.org/show_bug.cgi?id=89875	15	https://bugs.webkit.org/show_bug.cgi?id=89875
5		16

Lines 1-5 a/ChangeLog_sec1
- a/ChangeLog +12 lines
1	2013-02-20 Thiago Marcos P. Santos <thiago.santos@intel.com>	1	2013-02-20 Thiago Marcos P. Santos <thiago.santos@intel.com>
2		2
		3	[GTK][WK2] Add seccomp filters support
		4	https://bugs.webkit.org/show_bug.cgi?id=110014
		5
		6	Reviewed by NOBODY (OOPS!).
		7
		8	* Source/autotools/FindDependencies.m4:
		9	* Source/autotools/PrintBuildConfiguration.m4:
		10	* Source/autotools/ReadCommandLineArguments.m4:
		11	* Source/autotools/SetupAutomake.m4:
		12
		13	2013-02-20 Thiago Marcos P. Santos <thiago.santos@intel.com>
		14
3	[WK2] Drop WebProcess capabilities on Linux using seccomp filters	15	[WK2] Drop WebProcess capabilities on Linux using seccomp filters
4	https://bugs.webkit.org/show_bug.cgi?id=89875	16	https://bugs.webkit.org/show_bug.cgi?id=89875
5		17