Attachment 348229 Details for Bug 189023 – Patch

[patch] Patch

bug-189023-20180827160957.patch (text/plain), 2.87 KB, created by Brent Fulgham on 2018-08-27 16:09:58 PDT

(hide)

Description:

Filename:

MIME Type:

Creator: Brent Fulgham

Created: 2018-08-27 16:09:58 PDT

Size: 2.87 KB

patch

obsolete

>Subversion Revision: 235371
>diff --git a/Source/WebKit/ChangeLog b/Source/WebKit/ChangeLog
>index 1181aa2fe4bcea1aa950db505f092f5f1631abc5..9db0383a54de2ca3347dff95e6da704d0a11bb1e 100644
>--- a/Source/WebKit/ChangeLog
>+++ b/Source/WebKit/ChangeLog
>@@ -1,3 +1,17 @@
>+2018-08-27  Brent Fulgham  <bfulgham@apple.com>
>+
>+        [macOS] Whitelist Network process features for VPN
>+        https://bugs.webkit.org/show_bug.cgi?id=189023
>+        <rdar://problem/43310000>
>+
>+        Reviewed by NOBODY (OOPS!).
>+
>+        CFNetwork needs access to some VPN preference files to configure networking, and
>+        need to be allowed to communicate with the VPN process from the Network Process
>+        sandbox.
>+
>+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
>+
> 2018-08-27  Alex Christensen  <achristensen@webkit.org>
> 
>         Transition WKBrowsingContextController from WKPageLoaderClient to WKPageNavigationClient
>diff --git a/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in b/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in
>index bbbf5c0ebeb2b576e3fc0726f67d5cc2340e0422..cab796dc1efa5850e3b803d1e46b60b124293517 100644
>--- a/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in
>+++ b/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in
>@@ -155,6 +155,7 @@
>     (global-name "com.apple.cookied")
>     (global-name "com.apple.cfnetwork.AuthBrokerAgent")
>     (global-name "com.apple.cfnetwork.cfnetworkagent")
>+    (global-name "com.apple.ist.ds.appleconnect2.service.kdctunnelcontroller")
>     (global-name "com.apple.lsd.mapdb")
>     (global-name "com.apple.nesessionmanager.flow-divert-token")
> )
>@@ -197,7 +198,16 @@
>        (literal "/Library/Preferences/com.apple.security.revocation.plist")
>        (home-literal "/Library/Application Support/SyncServices/Local/ClientsWithChanges/com.apple.Keychain")
>        (home-literal "/Library/Preferences/com.apple.security.plist")
>-       (home-literal "/Library/Preferences/com.apple.security.revocation.plist"))
>+       (home-literal "/Library/Preferences/com.apple.security.revocation.plist")
>+
>+       ; Likewise for <rdar://problem/43310000>
>+       (literal "/Library/Preferences/com.apple.ist.ds.appleconnect2.plist")
>+       (literal "/Library/Preferences/com.apple.ist.ds.appleconnect2.production.plist")
>+       (home-literal "/Library/Preferences/com.apple.ist.ds.appleconnect2.plist")
>+       (home-literal "/Library/Preferences/com.apple.ist.ds.appleconnect2.production.plist")
>+       (home-regex (string-append "/Library/Preferences/ByHost/com\.apple\.ist\.ds\.appleconnect2\." (uuid-regex-string) "\.plist$"))
>+       (home-regex (string-append "/Library/Preferences/ByHost/com\.apple\.ist\.ds\.appleconnect2\.production\." (uuid-regex-string) "\.plist$"))
>+)
> 
> (allow ipc-posix-shm-read* ipc-posix-shm-write-data
>        (ipc-posix-name "com.apple.AppleDatabaseChanged"))

Actions: View | Formatted Diff | Diff

Attachments on bug 189023: 348229