Attachment 360149 Details for Bug 193828 – Patch

[patch] Patch

bug-193828-20190125130227.patch (text/plain), 3.17 KB, created by Per Arne Vollan on 2019-01-25 13:02:28 PST

(hide)

Description:

Filename:

MIME Type:

Creator: Per Arne Vollan

Created: 2019-01-25 13:02:28 PST

Size: 3.17 KB

patch

obsolete

>Index: Source/WebKit/ChangeLog
>===================================================================
>--- Source/WebKit/ChangeLog	(revision 240498)
>+++ Source/WebKit/ChangeLog	(working copy)
>@@ -1,3 +1,15 @@
>+2019-01-25  Per Arne Vollan  <pvollan@apple.com>
>+
>+        [iOS] Deny mach lookups to services not used.
>+        https://bugs.webkit.org/show_bug.cgi?id=193828
>+
>+        Reviewed by Brent Fulgham.
>+
>+        Start denying mach lookups to iOS services, which were previously allowed with reporting.
>+        Living-on has indicated that these services are not used.
>+
>+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
>+
> 2019-01-25  Brent Fulgham  <bfulgham@apple.com>
> 
>         Activate the WebResourceLoadStatisticsStore in the NetworkProcess and deactivate it in the UIProcess.
>Index: Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb
>===================================================================
>--- Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	(revision 240498)
>+++ Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb	(working copy)
>@@ -449,7 +449,11 @@
>     (global-name "com.apple.coremedia.decompressionsession")
>     (global-name "com.apple.coremedia.videoqueue"))
> 
>-(allow mach-lookup (with report)
>+;; These services have been identified as unused during living-on.
>+;; This list overrides some definitions above and in common.sb.
>+;; FIXME: remove overridden rules once the final list has been
>+;; established, see https://bugs.webkit.org/show_bug.cgi?id=193840
>+(deny mach-lookup
>     (global-name "com.apple.AGXCompilerService")
>     (global-name "com.apple.CoreAuthentication.daemon.libxpc")
>     (global-name "com.apple.FileCoordination")
>@@ -476,7 +480,6 @@
>     (global-name "com.apple.assertiond.expiration")
>     (global-name "com.apple.assertiond.processassertionconnection")
>     (global-name "com.apple.assertiond.processinfoservice")
>-    (global-name "com.apple.audio.AURemoteIOServer")
>     (global-name "com.apple.audio.AudioComponentPrefs")
>     (global-name "com.apple.audio.AudioQueueServer")
>     (global-name "com.apple.audio.SystemSoundServer-iOS")
>@@ -497,11 +500,9 @@
>     (global-name "com.apple.coremedia.capturesession")
>     (global-name "com.apple.coremedia.capturesource")
>     (global-name "com.apple.coremedia.compressionsession")
>-    (global-name "com.apple.coremedia.endpoint.xpc")
>     (global-name "com.apple.coremedia.endpointplaybacksession.xpc")
>     (global-name "com.apple.coremedia.endpointremotecontrolsession.xpc")
>     (global-name "com.apple.coremedia.figcontentkeysession.xpc")
>-    (global-name "com.apple.coremedia.figcpecryptor")
>     (global-name "com.apple.coremedia.remotequeue")
>     (global-name "com.apple.coremedia.samplebufferaudiorenderer.xpc")
>     (global-name "com.apple.coremedia.samplebufferrendersynchronizer.xpc")
>@@ -531,7 +532,6 @@
>     (global-name "com.apple.marco")
>     (global-name "com.apple.mediaserverd")
>     (global-name "com.apple.mobile.usermanagerd.xpc")
>-    (global-name "com.apple.mobilegestalt.xpc")
>     (global-name "com.apple.nehelper")
>     (global-name "com.apple.nesessionmanager")
>     (global-name "com.apple.pegasus")

Actions: View | Formatted Diff | Diff

Attachments on bug 193828: 360120 | 360147 | 360149