ChangeLog

2016-02-20  Brent Fulgham  <bfulgham@apple.com>

        [WK2][Mac] Allow processes to set "fast-dev-casheable" bit

        https://bugs.webkit.org/show_bug.cgi?id=154503

        Reviewed by NOBODY (OOPS!).

        Update the various sandbox profiles with a declaration that using the

        system-fctl to touch the "hot file" flag (to support caching operations)

        is allowed.

        * Resources/PlugInSandboxProfiles/com.apple.QuickTime Plugin.plugin.sb:

        * Resources/PlugInSandboxProfiles/com.apple.WebKit.plugin-common.sb:

        * Resources/PlugInSandboxProfiles/com.macromedia.Flash Player.plugin.sb:

        * Resources/PlugInSandboxProfiles/com.microsoft.SilverlightPlugin.sb:

        * Resources/PlugInSandboxProfiles/com.oracle.java.JavaAppletPlugin.sb:

        * WebProcess/com.apple.WebProcess.sb.in:

2016-02-20  Olivier Blin  <olivier.blin@softathome.com>

        [cmake] Use ICU include dirs in WebKit2 and WebKitTestRunner

196865

Source/WebKit2/Resources/PlugInSandboxProfiles/com.apple.QuickTime Plugin.plugin.sb

(allow file-read* file-write*

    (home-library-subpath "/Caches/QuickTime")

    (home-library-preferences-literal "/QuickTime Preferences"))

30(allow system-fsctl (fsctl-command (_IO "h" 47)))

3031

3132(allow network-bind (local ip))

196846

Source/WebKit2/Resources/PlugInSandboxProfiles/com.apple.WebKit.plugin-common.sb

(allow file*

    ;; FIXME: This should be removed when <rdar://problem/10479685> is fixed.

    (home-library-subpath "/Keychains"))

206(allow system-fsctl (fsctl-command (_IO "h" 47)))

;; IOKit user clients

(allow iokit-open

196846

Source/WebKit2/Resources/PlugInSandboxProfiles/com.macromedia.Flash Player.plugin.sb

    (literal "/Library/Application Support/Macromedia/FlashAuthor.cfg")

    (subpath "/Library/Application Support/Macromedia/FlashPlayerTrust"))

63(allow system-fsctl (fsctl-command (_IO "h" 47)))

64

6365(allow network-bind (local ip))

66(allow system-fsctl (fsctl-command (_IO "h" 47)))

6467

196846

Source/WebKit2/Resources/PlugInSandboxProfiles/com.microsoft.SilverlightPlugin.sb

(allow ipc-posix-shm*

    (ipc-posix-name-regex #"^CoreCLR_"))

53(allow system-fsctl (fsctl-command (_IO "h" 47)))

54

(allow network-bind (local ip))

(webkit-powerbox)

196846

Source/WebKit2/Resources/PlugInSandboxProfiles/com.oracle.java.JavaAppletPlugin.sb

(deny file-write* (with no-log) (subpath "/Library/Application Support/Oracle"))

(deny file-write* (with no-log) (subpath (param "WEBKIT2_FRAMEWORK_DIR")))

77(allow system-fsctl (fsctl-command (_IO "h" 47)))

78

7779(deny job-creation (with no-log))

196846

Source/WebKit2/WebProcess/com.apple.WebProcess.sb.in

    (literal "/dev/autofs_nowait")) ; Used by CF to circumvent automount triggers

(allow ipc-posix-shm

    (ipc-posix-name-regex #"^CFPBS:")) ; <rdar://problem/13757475>

232(allow system-fsctl (fsctl-command (_IO "h" 47)))

;; Graphics

(system-graphics)

196846