Attachment 360120 Details for Bug 193828 – Patch

[patch] Patch

bug-193828-20190125101813.patch (text/plain), 1.61 KB, created by Per Arne Vollan on 2019-01-25 10:18:14 PST

(hide)

Description:

Filename:

MIME Type:

Creator: Per Arne Vollan

Created: 2019-01-25 10:18:14 PST

Size: 1.61 KB

patch

obsolete

>Index: Source/WebKit/ChangeLog
>===================================================================
>--- Source/WebKit/ChangeLog	(revision 240478)
>+++ Source/WebKit/ChangeLog	(working copy)
>@@ -1,3 +1,15 @@
>+2019-01-25  Per Arne Vollan  <pvollan@apple.com>
>+
>+        [iOS] Deny mach lookups to services not used.
>+        https://bugs.webkit.org/show_bug.cgi?id=193828
>+
>+        Reviewed by NOBODY (OOPS!).
>+
>+        Start denying mach lookups to iOS services, which were previously allowed with reporting.
>+        Living-on has indicated that these services are not used.
>+
>+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
>+
> 2019-01-16  Alan Coon  <alancoon@apple.com>
> 
>         Cherry-pick r240087. rdar://problem/47297304
>Index: Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb
>===================================================================
>--- Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	(revision 240354)
>+++ Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	(working copy)
>@@ -446,7 +446,10 @@
>     (global-name "com.apple.coremedia.decompressionsession")
>     (global-name "com.apple.coremedia.videoqueue"))
> 
>-(allow mach-lookup (with report)
>+;; These services have been identified as unused during living-on.
>+;; This list overrides some definitions above and in common.sb.
>+;; FIXME: remove duplicates once the final list have been established.
>+(deny mach-lookup
>     (global-name "com.apple.AGXCompilerService")
>     (global-name "com.apple.CoreAuthentication.daemon.libxpc")
>     (global-name "com.apple.FileCoordination")

Actions: View | Formatted Diff | Diff

Attachments on bug 193828: 360120 | 360147 | 360149