Attachment 339586 Details for Bug 185319 – Patch

[patch] Patch

bug-185319-20180504130735.patch (text/plain), 2.33 KB, created by Per Arne Vollan on 2018-05-04 13:07:35 PDT

(hide)

Description:

Filename:

MIME Type:

Creator: Per Arne Vollan

Created: 2018-05-04 13:07:35 PDT

Size: 2.33 KB

patch

obsolete

>Index: Source/WebKit/ChangeLog
>===================================================================
>--- Source/WebKit/ChangeLog	(revision 231371)
>+++ Source/WebKit/ChangeLog	(working copy)
>@@ -1,3 +1,14 @@
>+2018-05-04  Per Arne Vollan  <pvollan@apple.com>
>+
>+        Adjust sandbox profile for simulator.
>+        https://bugs.webkit.org/show_bug.cgi?id=185319
>+
>+        Reviewed by NOBODY (OOPS!).
>+
>+        Disable Kerberos rules, as well as rules related to NSApplication initialization.
>+
>+        * WebProcess/com.apple.WebProcess.sb.in:
>+
> 2018-05-04  Tim Horton  <timothy_horton@apple.com>
> 
>         Wasted time dlopening Lookup when tearing down a WKWebView
>Index: Source/WebKit/WebProcess/com.apple.WebProcess.sb.in
>===================================================================
>--- Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	(revision 231371)
>+++ Source/WebKit/WebProcess/com.apple.WebProcess.sb.in	(working copy)
>@@ -643,13 +643,14 @@
> (allow mach-lookup
>     (global-name "com.apple.nehelper"))
> 
>+#if PLATFORM(MAC)
> ;; FIXME should be removed when <rdar://problem/9347205> + related radar in Safari is fixed
> (allow mach-lookup
>        (global-name "org.h5l.kcm")
>        (global-name "com.apple.GSSCred")
>        (global-name "com.apple.system.logger")
>        (global-name "com.apple.system.notification_center"))
>-#if PLATFORM(MAC) && __MAC_OS_X_VERSION_MIN_REQUIRED < 101300
>+#if __MAC_OS_X_VERSION_MIN_REQUIRED < 101300
> (allow network-outbound
>        (remote udp))
> #endif
>@@ -664,6 +665,7 @@
>         (literal "/private/etc/host")
>         (subpath "/Library/KerberosPlugins/GSSAPI")
>         (subpath "/Library/KerberosPlugins/KerberosFrameworkPlugins"))
>+#endif
> 
> (if (defined? 'vnode-type)
>         (deny file-write-create (vnode-type SYMLINK)))
>@@ -687,6 +689,7 @@
>        (global-name "com.apple.coreservices.appleevents")
>        (global-name "com.apple.pasteboard.1")
>        (global-name "com.apple.speech.recognitionserver"))
>+#if PLATFORM(MAC)
> ;; Also part of unnecessary NSApplication initialization, but we can't block access to these yet, see <rdar://problem/13869765>.
> (allow file-read*
>        (subpath "/Library/Components")
>@@ -695,6 +698,7 @@
>        (home-subpath "/Library/Components")
>        (home-subpath "/Library/Keyboard Layouts")
>        (home-subpath "/Library/Input Methods"))
>+#endif
> 
> ;; AirPlay
> (allow mach-lookup

Actions: View | Formatted Diff | Diff

Attachments on bug 185319: 339586