WebKit Bugzilla
Attachment 360149 Details for
Bug 193828
: [iOS] Deny mach lookups to services not used.
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
Patch
bug-193828-20190125130227.patch (text/plain), 3.17 KB, created by
Per Arne Vollan
on 2019-01-25 13:02:28 PST
(
hide
)
Description:
Patch
Filename:
MIME Type:
Creator:
Per Arne Vollan
Created:
2019-01-25 13:02:28 PST
Size:
3.17 KB
patch
obsolete
>Index: Source/WebKit/ChangeLog >=================================================================== >--- Source/WebKit/ChangeLog (revision 240498) >+++ Source/WebKit/ChangeLog (working copy) >@@ -1,3 +1,15 @@ >+2019-01-25 Per Arne Vollan <pvollan@apple.com> >+ >+ [iOS] Deny mach lookups to services not used. >+ https://bugs.webkit.org/show_bug.cgi?id=193828 >+ >+ Reviewed by Brent Fulgham. >+ >+ Start denying mach lookups to iOS services, which were previously allowed with reporting. >+ Living-on has indicated that these services are not used. >+ >+ * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb: >+ > 2019-01-25 Brent Fulgham <bfulgham@apple.com> > > Activate the WebResourceLoadStatisticsStore in the NetworkProcess and deactivate it in the UIProcess. >Index: Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb >=================================================================== >--- Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (revision 240498) >+++ Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (working copy) >@@ -449,7 +449,11 @@ > (global-name "com.apple.coremedia.decompressionsession") > (global-name "com.apple.coremedia.videoqueue")) > >-(allow mach-lookup (with report) >+;; These services have been identified as unused during living-on. >+;; This list overrides some definitions above and in common.sb. >+;; FIXME: remove overridden rules once the final list has been >+;; established, see https://bugs.webkit.org/show_bug.cgi?id=193840 >+(deny mach-lookup > (global-name "com.apple.AGXCompilerService") > (global-name "com.apple.CoreAuthentication.daemon.libxpc") > (global-name "com.apple.FileCoordination") >@@ -476,7 +480,6 @@ > (global-name "com.apple.assertiond.expiration") > (global-name "com.apple.assertiond.processassertionconnection") > (global-name "com.apple.assertiond.processinfoservice") >- (global-name "com.apple.audio.AURemoteIOServer") > (global-name "com.apple.audio.AudioComponentPrefs") > (global-name "com.apple.audio.AudioQueueServer") > (global-name "com.apple.audio.SystemSoundServer-iOS") >@@ -497,11 +500,9 @@ > (global-name "com.apple.coremedia.capturesession") > (global-name "com.apple.coremedia.capturesource") > (global-name "com.apple.coremedia.compressionsession") >- (global-name "com.apple.coremedia.endpoint.xpc") > (global-name "com.apple.coremedia.endpointplaybacksession.xpc") > (global-name "com.apple.coremedia.endpointremotecontrolsession.xpc") > (global-name "com.apple.coremedia.figcontentkeysession.xpc") >- (global-name "com.apple.coremedia.figcpecryptor") > (global-name "com.apple.coremedia.remotequeue") > (global-name "com.apple.coremedia.samplebufferaudiorenderer.xpc") > (global-name "com.apple.coremedia.samplebufferrendersynchronizer.xpc") >@@ -531,7 +532,6 @@ > (global-name "com.apple.marco") > (global-name "com.apple.mediaserverd") > (global-name "com.apple.mobile.usermanagerd.xpc") >- (global-name "com.apple.mobilegestalt.xpc") > (global-name "com.apple.nehelper") > (global-name "com.apple.nesessionmanager") > (global-name "com.apple.pegasus")
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Formatted Diff
|
Diff
Attachments on
bug 193828
:
360120
|
360147
| 360149