Attachment 360641 Details for Bug 194061 – Patch

[patch] Patch

bug-194061-20190130162316.patch (text/plain), 1.30 KB, created by Per Arne Vollan on 2019-01-30 16:23:16 PST

(hide)

Description:

Filename:

MIME Type:

Creator: Per Arne Vollan

Created: 2019-01-30 16:23:16 PST

Size: 1.30 KB

patch

obsolete

>Index: Source/WebKit/ChangeLog
>===================================================================
>--- Source/WebKit/ChangeLog	(revision 240737)
>+++ Source/WebKit/ChangeLog	(working copy)
>@@ -1,3 +1,14 @@
>+2019-01-30  Per Arne Vollan  <pvollan@apple.com>
>+
>+        [macOS] Disable permissive call logging in sandbox
>+        https://bugs.webkit.org/show_bug.cgi?id=194061
>+
>+        Reviewed by NOBODY (OOPS!).
>+
>+        Strict call filtering should be reenabled.
>+
>+        * WebProcess/com.apple.WebProcess.sb.in:
>+
> 2019-01-30  Per Arne Vollan  <pvollan@apple.com>
> 
>         [macOS] Sandbox fails to compile on 10.12
>Index: Source/WebKit/WebProcess/com.apple.WebProcess.sb.in
>===================================================================
>--- Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	(revision 240737)
>+++ Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	(working copy)
>@@ -827,6 +827,7 @@
> #endif // PLATFORM(MAC)
> 
> (when (defined? 'syscall-unix)
>+    (deny syscall-unix (with send-signal SIGKILL))
>     (allow syscall-unix
>         (syscall-number SYS_exit)
>         (syscall-number SYS_read)
>@@ -956,6 +957,7 @@
>         (syscall-number SYS_necp_client_action)
>         (syscall-number SYS_ulock_wait)
>         (syscall-number SYS_ulock_wake)
>+        (syscall-number SYS_work_interval_ctl)
>     )
> )
>

Actions: View | Formatted Diff | Diff

Attachments on bug 194061: 360641 | 360867 | 361065 | 361102 | 363036