Attachment 361065 Details for Bug 194061 – Patch

[patch] Patch

bug-194061-20190204095220.patch (text/plain), 1.36 KB, created by Per Arne Vollan on 2019-02-04 09:52:20 PST

(hide)

Description:

Filename:

MIME Type:

Creator: Per Arne Vollan

Created: 2019-02-04 09:52:20 PST

Size: 1.36 KB

patch

obsolete

>Index: Source/WebKit/ChangeLog
>===================================================================
>--- Source/WebKit/ChangeLog	(revision 240928)
>+++ Source/WebKit/ChangeLog	(working copy)
>@@ -1,3 +1,15 @@
>+2019-02-04  Per Arne Vollan  <pvollan@apple.com>
>+
>+        [macOS] Disable permissive call logging in sandbox
>+        https://bugs.webkit.org/show_bug.cgi?id=194061
>+        <rdar://problem/47686253>
>+
>+        Reviewed by NOBODY (OOPS!).
>+
>+        Strict call filtering should be reenabled.
>+
>+        * WebProcess/com.apple.WebProcess.sb.in:
>+
> 2019-02-04  Youenn Fablet  <youenn@apple.com>
> 
>         Capture state should be managed consistently when doing process swapping
>Index: Source/WebKit/WebProcess/com.apple.WebProcess.sb.in
>===================================================================
>--- Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	(revision 240927)
>+++ Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	(working copy)
>@@ -830,6 +830,7 @@
> #endif // PLATFORM(MAC)
> 
> (when (defined? 'syscall-unix)
>+    (deny syscall-unix (with send-signal SIGKILL))
>     (allow syscall-unix
>         (syscall-number SYS_exit)
>         (syscall-number SYS_read)
>@@ -960,6 +961,7 @@
>         (syscall-number SYS_ulock_wait)
>         (syscall-number SYS_ulock_wake)
>         (syscall-number SYS_work_interval_ctl)
>+        (syscall-number SYS_kdebug_typefilter)
>     )
> )
>

Actions: View | Formatted Diff | Diff

Attachments on bug 194061: 360641 | 360867 | 361065 | 361102 | 363036