WebKit Bugzilla
Attachment 360120 Details for
Bug 193828
: [iOS] Deny mach lookups to services not used.
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
Patch
bug-193828-20190125101813.patch (text/plain), 1.61 KB, created by
Per Arne Vollan
on 2019-01-25 10:18:14 PST
(
hide
)
Description:
Patch
Filename:
MIME Type:
Creator:
Per Arne Vollan
Created:
2019-01-25 10:18:14 PST
Size:
1.61 KB
patch
obsolete
>Index: Source/WebKit/ChangeLog >=================================================================== >--- Source/WebKit/ChangeLog (revision 240478) >+++ Source/WebKit/ChangeLog (working copy) >@@ -1,3 +1,15 @@ >+2019-01-25 Per Arne Vollan <pvollan@apple.com> >+ >+ [iOS] Deny mach lookups to services not used. >+ https://bugs.webkit.org/show_bug.cgi?id=193828 >+ >+ Reviewed by NOBODY (OOPS!). >+ >+ Start denying mach lookups to iOS services, which were previously allowed with reporting. >+ Living-on has indicated that these services are not used. >+ >+ * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb: >+ > 2019-01-16 Alan Coon <alancoon@apple.com> > > Cherry-pick r240087. rdar://problem/47297304 >Index: Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb >=================================================================== >--- Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (revision 240354) >+++ Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (working copy) >@@ -446,7 +446,10 @@ > (global-name "com.apple.coremedia.decompressionsession") > (global-name "com.apple.coremedia.videoqueue")) > >-(allow mach-lookup (with report) >+;; These services have been identified as unused during living-on. >+;; This list overrides some definitions above and in common.sb. >+;; FIXME: remove duplicates once the final list have been established. >+(deny mach-lookup > (global-name "com.apple.AGXCompilerService") > (global-name "com.apple.CoreAuthentication.daemon.libxpc") > (global-name "com.apple.FileCoordination")
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Formatted Diff
|
Diff
Attachments on
bug 193828
:
360120
|
360147
|
360149