<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>189005</bug_id>
          
          <creation_ts>2018-08-27 14:23:48 -0700</creation_ts>
          <short_desc>[macOS] Block CoreServices in sandbox.</short_desc>
          <delta_ts>2018-12-17 14:34:21 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit Misc.</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>REOPENED</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Per Arne Vollan">pvollan</reporter>
          <assigned_to name="Per Arne Vollan">pvollan</assigned_to>
          <cc>achristensen</cc>
    
    <cc>bfulgham</cc>
    
    <cc>commit-queue</cc>
    
    <cc>thorton</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1454081</commentid>
    <comment_count>0</comment_count>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2018-08-27 14:23:48 -0700</bug_when>
    <thetext>The sandbox for the WebContent process should block CoreServices.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1454083</commentid>
    <comment_count>1</comment_count>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2018-08-27 14:24:28 -0700</bug_when>
    <thetext>rdar://problem/35369091</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1454085</commentid>
    <comment_count>2</comment_count>
      <attachid>348198</attachid>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2018-08-27 14:26:16 -0700</bug_when>
    <thetext>Created attachment 348198
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1454089</commentid>
    <comment_count>3</comment_count>
      <attachid>348200</attachid>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2018-08-27 14:31:21 -0700</bug_when>
    <thetext>Created attachment 348200
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1454182</commentid>
    <comment_count>4</comment_count>
      <attachid>348200</attachid>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2018-08-27 16:18:38 -0700</bug_when>
    <thetext>Comment on attachment 348200
Patch

r=me. Please double-check that Activity Monitor still shows the right stuff.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1454186</commentid>
    <comment_count>5</comment_count>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2018-08-27 16:20:47 -0700</bug_when>
    <thetext>(In reply to Brent Fulgham from comment #4)
&gt; Comment on attachment 348200 [details]
&gt; Patch
&gt; 
&gt; r=me. Please double-check that Activity Monitor still shows the right stuff.

Thanks for reviewing! Activity monitor is still showing the url of the WebContent process.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1454218</commentid>
    <comment_count>6</comment_count>
      <attachid>348200</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2018-08-27 16:47:48 -0700</bug_when>
    <thetext>Comment on attachment 348200
Patch

Clearing flags on attachment: 348200

Committed r235411: &lt;https://trac.webkit.org/changeset/235411&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1454219</commentid>
    <comment_count>7</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2018-08-27 16:47:49 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1488595</commentid>
    <comment_count>8</comment_count>
    <who name="Alex Christensen">achristensen</who>
    <bug_when>2018-12-17 14:34:21 -0800</bug_when>
    <thetext>Rolling out in https://bugs.webkit.org/show_bug.cgi?id=192778</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>348198</attachid>
            <date>2018-08-27 14:26:16 -0700</date>
            <delta_ts>2018-08-27 14:31:20 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-189005-20180827142616.patch</filename>
            <type>text/plain</type>
            <size>1518</size>
            <attacher name="Per Arne Vollan">pvollan</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>348200</attachid>
            <date>2018-08-27 14:31:21 -0700</date>
            <delta_ts>2018-08-27 16:47:48 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-189005-20180827143120.patch</filename>
            <type>text/plain</type>
            <size>1553</size>
            <attacher name="Per Arne Vollan">pvollan</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL
aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyMzU0MDApCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv
Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDE4LTA4LTI3ICBQZXIgQXJuZSBW
b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbbWFjT1NdIEJsb2NrIENvcmVT
ZXJ2aWNlcyBpbiBzYW5kYm94LgorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93
X2J1Zy5jZ2k/aWQ9MTg5MDA1CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS8zNTM2OTA5MT4KKwor
ICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBUaGUgc2FuZGJv
eCBmb3IgdGhlIFdlYkNvbnRlbnQgcHJvY2VzcyBzaG91bGQgYmxvY2sgQ29yZVNlcnZpY2VzLgor
CisgICAgICAgICogV2ViUHJvY2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbjoKKwogMjAx
OC0wOC0yNyAgQWxleCBDaHJpc3RlbnNlbiAgPGFjaHJpc3RlbnNlbkB3ZWJraXQub3JnPgogCiAg
ICAgICAgIFBhc3Mgd2ViUGFnZUlEIGFuZCB3ZWJGcmFtZUlEIHRvIE5ldHdvcmtMb2FkIGZvciBz
cGVjdWxhdGl2ZSBsb2FkcwpJbmRleDogU291cmNlL1dlYktpdC9XZWJQcm9jZXNzL2NvbS5hcHBs
ZS5XZWJQcm9jZXNzLnNiLmluCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvV2ViUHJvY2Vz
cy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgkocmV2aXNpb24gMjM1Mzg3KQorKysgU291cmNl
L1dlYktpdC9XZWJQcm9jZXNzL2NvbS5hcHBsZS5XZWJQcm9jZXNzLnNiLmluCSh3b3JraW5nIGNv
cHkpCkBAIC02NDcsNyArNjQ3LDEwIEBACiA7OyBDb3JlRm91bmRhdGlvbi4gV2UgZG9uJ3QgaW1w
b3J0IGNvbS5hcHBsZS5jb3JlZm91bmRhdGlvbi5zYiwgYmVjYXVzZSBpdCBhbGxvd3MgdW5uZWNl
c3NhcnkgYWNjZXNzIHRvIHBhc3RlYm9hcmQuCiAoYWxsb3cgbWFjaC1sb29rdXAKICAgICAoZ2xv
YmFsLW5hbWUtcmVnZXggIyJeY29tLmFwcGxlLmRpc3RyaWJ1dGVkX25vdGlmaWNhdGlvbnMiKSAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKLSAg
ICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5Db3JlU2VydmljZXMuY29yZXNlcnZpY2VzZCIpKQor
I2lmIF9fTUFDX09TX1hfVkVSU0lPTl9NSU5fUkVRVUlSRUQgPCAxMDE0MDAKKyAgICAoZ2xvYmFs
LW5hbWUgImNvbS5hcHBsZS5Db3JlU2VydmljZXMuY29yZXNlcnZpY2VzZCIpCisjZW5kaWYKKykK
IChhbGxvdyBmaWxlLXJlYWQtZGF0YQogICAgIChsaXRlcmFsICIvZGV2L2F1dG9mc19ub3dhaXQi
KSkgOyBVc2VkIGJ5IENGIHRvIGNpcmN1bXZlbnQgYXV0b21vdW50IHRyaWdnZXJzCiAoYWxsb3cg
aXBjLXBvc2l4LXNobQo=
</data>

          </attachment>
      

    </bug>

</bugzilla>