Attachment 360147 Details for Bug 193828 – Patch

[patch] Patch

bug-193828-20190125124229.patch (text/plain), 3.06 KB, created by Per Arne Vollan on 2019-01-25 12:42:29 PST

(hide)

Description:

Filename:

MIME Type:

Creator: Per Arne Vollan

Created: 2019-01-25 12:42:29 PST

Size: 3.06 KB

patch

obsolete

>Index: Source/WebKit/ChangeLog
>===================================================================
>--- Source/WebKit/ChangeLog	(revision 240494)
>+++ Source/WebKit/ChangeLog	(working copy)
>@@ -1,3 +1,15 @@
>+2019-01-25  Per Arne Vollan  <pvollan@apple.com>
>+
>+        [iOS] Deny mach lookups to services not used.
>+        https://bugs.webkit.org/show_bug.cgi?id=193828
>+
>+        Reviewed by NOBODY (OOPS!).
>+
>+        Start denying mach lookups to iOS services, which were previously allowed with reporting.
>+        Living-on has indicated that these services are not used.
>+
>+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
>+
> 2019-01-25  David Kilzer  <ddkilzer@apple.com>
> 
>         Move soft-linking of Lookup.framework out of LookupSPI.h
>Index: Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb
>===================================================================
>--- Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	(revision 240494)
>+++ Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	(working copy)
>@@ -449,7 +449,10 @@
>     (global-name "com.apple.coremedia.decompressionsession")
>     (global-name "com.apple.coremedia.videoqueue"))
> 
>-(allow mach-lookup (with report)
>+;; These services have been identified as unused during living-on.
>+;; This list overrides some definitions above and in common.sb.
>+;; FIXME: remove duplicates once the final list have been established.
>+(deny mach-lookup
>     (global-name "com.apple.AGXCompilerService")
>     (global-name "com.apple.CoreAuthentication.daemon.libxpc")
>     (global-name "com.apple.FileCoordination")
>@@ -476,7 +479,6 @@
>     (global-name "com.apple.assertiond.expiration")
>     (global-name "com.apple.assertiond.processassertionconnection")
>     (global-name "com.apple.assertiond.processinfoservice")
>-    (global-name "com.apple.audio.AURemoteIOServer")
>     (global-name "com.apple.audio.AudioComponentPrefs")
>     (global-name "com.apple.audio.AudioQueueServer")
>     (global-name "com.apple.audio.SystemSoundServer-iOS")
>@@ -497,11 +499,9 @@
>     (global-name "com.apple.coremedia.capturesession")
>     (global-name "com.apple.coremedia.capturesource")
>     (global-name "com.apple.coremedia.compressionsession")
>-    (global-name "com.apple.coremedia.endpoint.xpc")
>     (global-name "com.apple.coremedia.endpointplaybacksession.xpc")
>     (global-name "com.apple.coremedia.endpointremotecontrolsession.xpc")
>     (global-name "com.apple.coremedia.figcontentkeysession.xpc")
>-    (global-name "com.apple.coremedia.figcpecryptor")
>     (global-name "com.apple.coremedia.remotequeue")
>     (global-name "com.apple.coremedia.samplebufferaudiorenderer.xpc")
>     (global-name "com.apple.coremedia.samplebufferrendersynchronizer.xpc")
>@@ -531,7 +531,6 @@
>     (global-name "com.apple.marco")
>     (global-name "com.apple.mediaserverd")
>     (global-name "com.apple.mobile.usermanagerd.xpc")
>-    (global-name "com.apple.mobilegestalt.xpc")
>     (global-name "com.apple.nehelper")
>     (global-name "com.apple.nesessionmanager")
>     (global-name "com.apple.pegasus")

Flags:

bfulgham: review+

Actions: View | Formatted Diff | Diff

Attachments on bug 193828: 360120 | 360147 | 360149