Attachment 343543 Details for Bug 187018 – Patch

[patch] Patch

bug-187018-20180625144441.patch (text/plain), 3.22 KB, created by youenn fablet on 2018-06-25 14:44:42 PDT

(hide)

Description:

Filename:

MIME Type:

Creator: youenn fablet

Created: 2018-06-25 14:44:42 PDT

Size: 3.22 KB

patch

obsolete

>Subversion Revision: 233151
>diff --git a/Source/WebKit/ChangeLog b/Source/WebKit/ChangeLog
>index 2f463881489b88c1f6295ab624c7333b3ec5f98d..09cb952514acde4e8c06964ccad35f901b333845 100644
>--- a/Source/WebKit/ChangeLog
>+++ b/Source/WebKit/ChangeLog
>@@ -1,3 +1,14 @@
>+2018-06-25  Youenn Fablet  <youenn@apple.com>
>+
>+        Update Cisco Webex sandbox to make it functional
>+        https://bugs.webkit.org/show_bug.cgi?id=187018
>+
>+        Reviewed by NOBODY (OOPS!).
>+
>+        These cisco sandbox changes allow removing sandbox errors and makes the plug-in almost functional modulo quarantine of downloaded files.
>+
>+        * Resources/PlugInSandboxProfiles/com.cisco.webex.plugin.gpc64.sb:
>+
> 2018-06-25  Youenn Fablet  <youenn@apple.com>
> 
>         Add API to control mock media devices
>diff --git a/Source/WebKit/Resources/PlugInSandboxProfiles/com.cisco.webex.plugin.gpc64.sb b/Source/WebKit/Resources/PlugInSandboxProfiles/com.cisco.webex.plugin.gpc64.sb
>index ca6cf8358fac8adcf8dcbdd3a454990a850739d7..df8ec5db5c11cb6cbbaff1e22b48a02fa5a96289 100644
>--- a/Source/WebKit/Resources/PlugInSandboxProfiles/com.cisco.webex.plugin.gpc64.sb
>+++ b/Source/WebKit/Resources/PlugInSandboxProfiles/com.cisco.webex.plugin.gpc64.sb
>@@ -28,12 +28,32 @@
> (define (home-literal home-relative-literal)
>     (literal (string-append (param "HOME_DIR") home-relative-literal)))
> 
>+(allow file-issue-extension
>+    (require-any
>+        (extension-class "com.apple.app-sandbox.read")
>+        (extension-class "com.apple.app-sandbox.read-write")))
>+
>+(allow file-read* file-write*
>+    (literal "/Library/ScriptingAdditions"))
>+
>+(allow file-read* file-write*
>+    (home-literal "/Library/Saved Application State/com.webex.meetingmanager.savedState"))
>+
>+(allow file-read* file-write*
>+    (home-subpath "/Library/Caches/com.webex.meetingmanager"))
>+
>+(allow file-read*
>+    (home-literal "/Library/Preferences/com.apple.AppleMultitouchTrackpad.plist"))
>+
> (allow file-read* file-write*
>     (home-literal "/Library/Preferences/com.cisco.webex.fuzzyWindowConfig.plist"))
> 
> (allow file-read* file-write*
>     (home-literal "/Library/Preferences/com.webex.meetingmanager.plist"))
> 
>+(allow file-read-data
>+    (home-literal "/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist"))
>+
> (allow file-read* file-write* file-write-create
>     (home-subpath "/Library/Application Support/WebEx Folder"))
> 
>@@ -41,6 +61,10 @@
> (allow file*
>     (prefix "/private/tmp"))
> 
>+(allow file*
>+    (prefix "/private/var/folders"))
>+
>+
> (allow file-read-data file-write-data
>     (path "/dev/tty"))
> 
>@@ -55,7 +79,10 @@
>     (global-name "com.apple.quicklook.ui.helper")
>     (global-name "com.apple.inputmethodkit.launchagent")
>     (global-name "com.apple.inputmethodkit.launcher")
>-    (global-name "com.apple.inputmethodkit.getxpcendpoint"))
>+    (global-name "com.apple.inputmethodkit.getxpcendpoint")
>+    (global-name "com.apple.audio.SystemSoundServer-OSX")
>+    (global-name "com.apple.dockling.server")
>+    (global-name "com.apple.iohideventsystem"))
> 
> (allow iokit-get-properties
>     (iokit-property "PowerControlSupported")
>@@ -72,6 +99,7 @@
>     (iokit-property "ActivationThresholds")
>     (iokit-property "mt-device-id"))
> 
>+
> (webkit-powerbox)
> (webkit-printing)
> (webkit-camera)

Actions: View | Formatted Diff | Diff

Attachments on bug 187018: 343543 | 343586 | 343668 | 343696 | 343711 | 343730