182648 2018-02-09 14:05:14 -0800 Sandbox violating attempting to read log formatting preference file 2018-02-09 15:56:47 -0800 1 1 1 Unclassified WebKit WebKit2 WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 bfulgham bfulgham bfulgham commit-queue eric.carlson webkit-bug-importer oldest_to_newest 1398081 0 bfulgham 2018-02-09 14:05:14 -0800 Several users have encountered sandbox violations when visiting cnn.com due to attempts to read logging preference files in '/usr/local/lib/log'. After talking with the relevant teams, we have decided to allow file-read-data access to this path. 1398082 1 bfulgham 2018-02-09 14:05:33 -0800 <rdar://problem/36629495> 1398093 2 333517 bfulgham 2018-02-09 14:31:48 -0800 Created attachment 333517 Patch 1398105 3 333522 bfulgham 2018-02-09 15:01:18 -0800 Created attachment 333522 Patch 1398135 4 333522 commit-queue 2018-02-09 15:56:46 -0800 Comment on attachment 333522 Patch Clearing flags on attachment: 333522 Committed r228341: <https://trac.webkit.org/changeset/228341> 1398136 5 commit-queue 2018-02-09 15:56:47 -0800 All reviewed patches have been landed. Closing bug. 333517 2018-02-09 14:31:48 -0800 2018-02-09 15:01:17 -0800 Patch bug-182648-20180209143148.patch text/plain 2354 bfulgham SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyMjgzMzgpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBACisyMDE4LTAyLTA5ICBCcmVudCBGdWxn aGFtICA8YmZ1bGdoYW1AYXBwbGUuY29tPgorCisgICAgICAgIFNhbmRib3ggdmlvbGF0aW5nIGF0 dGVtcHRpbmcgdG8gcmVhZCBsb2cgZm9ybWF0dGluZyBwcmVmZXJlbmNlIGZpbGUKKyAgICAgICAg aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE4MjY0OAorICAgICAgICA8 cmRhcjovL3Byb2JsZW0vMzY2Mjk0OTU+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChP T1BTISkuCisKKyAgICAgICAgUG9ydGlvbnMgb2YgdGhlIG1lZGlhIHN0YWNrIGF0dGVtcHQgdG8g cmVhZCBwcmVmZXJlbmNlIGluZm9ybWF0aW9uIGZyb20gL3Vzci9sb2NhbC9saWIvbG9nLiBUaGUg c2FuZGJveCBpcyBibG9ja2luZworICAgICAgICB0aGlzIGFjY2VzcywgZ2VuZXJhdGluZyBsb2cg c3BhbSBhbmQgcHJldmVudGluZyBzb21lIGxvZ2dpbmcgZmVhdHVyZXMgZnJvbSB3b3JraW5nIHBy b3Blcmx5LiBXZSBzaG91bGQgYWxsb3cKKyAgICAgICAgcmVhZCBhY2Nlc3MgdG8gdGhpcyBwYXRo LgorCisgICAgICAgICogTmV0d29ya1Byb2Nlc3MvbWFjL2NvbS5hcHBsZS5XZWJLaXQuTmV0d29y a1Byb2Nlc3Muc2IuaW46CisgICAgICAgICogUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3Mv Y29tLmFwcGxlLldlYktpdC5OZXR3b3JraW5nLnNiOgorCiAyMDE4LTAyLTA4ICBDaHJpcyBEdW1l eiAgPGNkdW1lekBhcHBsZS5jb20+CiAKICAgICAgICAgVGhlcmUgc2hvdWxkIGJlIGEgd2F5IHRv IGRpc2FibGUgW092ZXJyaWRlQnVpbHRpbnNdIGJlaGF2aW9yIGluIGEgZ2l2ZW4gRE9NV3JhcHBl cldvcmxkCkluZGV4OiBTb3VyY2UvV2ViS2l0L05ldHdvcmtQcm9jZXNzL21hYy9jb20uYXBwbGUu V2ViS2l0Lk5ldHdvcmtQcm9jZXNzLnNiLmluCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQv TmV0d29ya1Byb2Nlc3MvbWFjL2NvbS5hcHBsZS5XZWJLaXQuTmV0d29ya1Byb2Nlc3Muc2IuaW4J KHJldmlzaW9uIDIyODMzNykKKysrIFNvdXJjZS9XZWJLaXQvTmV0d29ya1Byb2Nlc3MvbWFjL2Nv bS5hcHBsZS5XZWJLaXQuTmV0d29ya1Byb2Nlc3Muc2IuaW4JKHdvcmtpbmcgY29weSkKQEAgLTEx MCw2ICsxMTAsMTAgQEAKICAgICAoc3VicGF0aCAocGFyYW0gIldFQktJVDJfRlJBTUVXT1JLX0RJ UiIpKSkKIChhbGxvdyBzeXN0ZW0tZnNjdGwgKGZzY3RsLWNvbW1hbmQgKF9JTyAiaCIgNDcpKSkK IAorKGFsbG93IGZpbGUtcmVhZC1kYXRhCisgICAgKGxpdGVyYWwgIi91c3IvbG9jYWwvbGliL2xv ZyIpIDsgPHJkYXI6Ly9wcm9ibGVtLzM2NjI5NDk1PgorKQorCiA7OyBTYW5kYm94IGV4dGVuc2lv bnMKIChkZWZpbmUgKGFwcGx5LXJlYWQtYW5kLWlzc3VlLWV4dGVuc2lvbiBvcCBwYXRoLWZpbHRl cikKICAgICAob3AgZmlsZS1yZWFkKiBwYXRoLWZpbHRlcikKSW5kZXg6IFNvdXJjZS9XZWJLaXQv UmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5OZXR3b3JraW5n LnNiCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxl cy9pb3MvY29tLmFwcGxlLldlYktpdC5OZXR3b3JraW5nLnNiCShyZXZpc2lvbiAyMjgzMzcpCisr KyBTb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5X ZWJLaXQuTmV0d29ya2luZy5zYgkod29ya2luZyBjb3B5KQpAQCAtNjYsNiArNjYsMTAgQEAKIChh bGxvdy13ZWxsLWtub3duLXN5c3RlbS1ncm91cC1jb250YWluZXItc3VicGF0aC1yZWFkCiAgICAg Ii9zeXN0ZW1ncm91cC5jb20uYXBwbGUubnN1cmxzdG9yYWdlZHJlc291cmNlcy9MaWJyYXJ5L2Rh ZnNhRGF0YS5iaW4iKQogCisoYWxsb3cgZmlsZS1yZWFkLWRhdGEKKyAgICAobGl0ZXJhbCAiL3Vz ci9sb2NhbC9saWIvbG9nIikgOyA8cmRhcjovL3Byb2JsZW0vMzY2Mjk0OTU+CispCisKIDs7IFNl Y3VyaXR5IGZyYW1ld29yawogKGFsbG93IG1hY2gtbG9va3VwCiAgICAgKGdsb2JhbC1uYW1lICJj b20uYXBwbGUub2NzcGQiKQo= 333522 2018-02-09 15:01:18 -0800 2018-02-09 15:56:46 -0800 Patch bug-182648-20180209150117.patch text/plain 3744 bfulgham SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyMjgzMzgpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDIwIEBACisyMDE4LTAyLTA5ICBCcmVudCBGdWxn aGFtICA8YmZ1bGdoYW1AYXBwbGUuY29tPgorCisgICAgICAgIFNhbmRib3ggdmlvbGF0aW5nIGF0 dGVtcHRpbmcgdG8gcmVhZCBsb2cgZm9ybWF0dGluZyBwcmVmZXJlbmNlIGZpbGUKKyAgICAgICAg aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE4MjY0OAorICAgICAgICA8 cmRhcjovL3Byb2JsZW0vMzY2Mjk0OTU+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChP T1BTISkuCisKKyAgICAgICAgVmFyaW91cyBmcmFtZXdvcmtzIGF0dGVtcHQgdG8gcmVhZCBsb2dn aW5nIGZvcm1hdCBpbmZvcm1hdGlvbiBmcm9tIC91c3IvbG9jYWwvbGliL2xvZy4gVGhlIHNhbmRi b3ggaXMgYmxvY2tpbmcKKyAgICAgICAgdGhpcywgZ2VuZXJhdGluZyBsb2cgc3BhbSBhbmQgcHJl dmVudGluZyBzb21lIGxvZ2dpbmcgZmVhdHVyZXMgZnJvbSB3b3JraW5nIHByb3Blcmx5LiBXZSBz aG91bGQgYWxsb3cgcmVhZAorICAgICAgICBhY2Nlc3MgdG8gdGhpcyBwYXRoLgorCisgICAgICAg ICogTmV0d29ya1Byb2Nlc3MvbWFjL2NvbS5hcHBsZS5XZWJLaXQuTmV0d29ya1Byb2Nlc3Muc2Iu aW46CisgICAgICAgICogUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldl YktpdC5OZXR3b3JraW5nLnNiOgorICAgICAgICAqIFJlc291cmNlcy9TYW5kYm94UHJvZmlsZXMv aW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYjoKKyAgICAgICAgKiBXZWJQcm9jZXNz L2NvbS5hcHBsZS5XZWJQcm9jZXNzLnNiLmluOgorCiAyMDE4LTAyLTA4ICBDaHJpcyBEdW1leiAg PGNkdW1lekBhcHBsZS5jb20+CiAKICAgICAgICAgVGhlcmUgc2hvdWxkIGJlIGEgd2F5IHRvIGRp c2FibGUgW092ZXJyaWRlQnVpbHRpbnNdIGJlaGF2aW9yIGluIGEgZ2l2ZW4gRE9NV3JhcHBlcldv cmxkCkluZGV4OiBTb3VyY2UvV2ViS2l0L05ldHdvcmtQcm9jZXNzL21hYy9jb20uYXBwbGUuV2Vi S2l0Lk5ldHdvcmtQcm9jZXNzLnNiLmluCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvTmV0 d29ya1Byb2Nlc3MvbWFjL2NvbS5hcHBsZS5XZWJLaXQuTmV0d29ya1Byb2Nlc3Muc2IuaW4JKHJl dmlzaW9uIDIyODMzNykKKysrIFNvdXJjZS9XZWJLaXQvTmV0d29ya1Byb2Nlc3MvbWFjL2NvbS5h cHBsZS5XZWJLaXQuTmV0d29ya1Byb2Nlc3Muc2IuaW4JKHdvcmtpbmcgY29weSkKQEAgLTExMCw2 ICsxMTAsMTAgQEAKICAgICAoc3VicGF0aCAocGFyYW0gIldFQktJVDJfRlJBTUVXT1JLX0RJUiIp KSkKIChhbGxvdyBzeXN0ZW0tZnNjdGwgKGZzY3RsLWNvbW1hbmQgKF9JTyAiaCIgNDcpKSkKIAor KGFsbG93IGZpbGUtcmVhZC1kYXRhCisgICAgKGxpdGVyYWwgIi91c3IvbG9jYWwvbGliL2xvZyIp IDsgPHJkYXI6Ly9wcm9ibGVtLzM2NjI5NDk1PgorKQorCiA7OyBTYW5kYm94IGV4dGVuc2lvbnMK IChkZWZpbmUgKGFwcGx5LXJlYWQtYW5kLWlzc3VlLWV4dGVuc2lvbiBvcCBwYXRoLWZpbHRlcikK ICAgICAob3AgZmlsZS1yZWFkKiBwYXRoLWZpbHRlcikKSW5kZXg6IFNvdXJjZS9XZWJLaXQvUmVz b3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5OZXR3b3JraW5nLnNi Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9p b3MvY29tLmFwcGxlLldlYktpdC5OZXR3b3JraW5nLnNiCShyZXZpc2lvbiAyMjgzMzcpCisrKyBT b3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJL aXQuTmV0d29ya2luZy5zYgkod29ya2luZyBjb3B5KQpAQCAtNjYsNiArNjYsMTAgQEAKIChhbGxv dy13ZWxsLWtub3duLXN5c3RlbS1ncm91cC1jb250YWluZXItc3VicGF0aC1yZWFkCiAgICAgIi9z eXN0ZW1ncm91cC5jb20uYXBwbGUubnN1cmxzdG9yYWdlZHJlc291cmNlcy9MaWJyYXJ5L2RhZnNh RGF0YS5iaW4iKQogCisoYWxsb3cgZmlsZS1yZWFkLWRhdGEKKyAgICAobGl0ZXJhbCAiL3Vzci9s b2NhbC9saWIvbG9nIikgOyA8cmRhcjovL3Byb2JsZW0vMzY2Mjk0OTU+CispCisKIDs7IFNlY3Vy aXR5IGZyYW1ld29yawogKGFsbG93IG1hY2gtbG9va3VwCiAgICAgKGdsb2JhbC1uYW1lICJjb20u YXBwbGUub2NzcGQiKQpJbmRleDogU291cmNlL1dlYktpdC9SZXNvdXJjZXMvU2FuZGJveFByb2Zp bGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQuc2IKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291 cmNlL1dlYktpdC9SZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0 LldlYkNvbnRlbnQuc2IJKHJldmlzaW9uIDIyODMzNykKKysrIFNvdXJjZS9XZWJLaXQvUmVzb3Vy Y2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNiCSh3 b3JraW5nIGNvcHkpCkBAIC0zNzAsNiArMzcwLDEwIEBACiA7OyBBbGxvdyBNYW5hZ2VkUHJlZmVy ZW5jZSBhY2Nlc3MKIChhbGxvdyBmaWxlLXJlYWQqIChsaXRlcmFsICIvcHJpdmF0ZS92YXIvTWFu YWdlZCBQcmVmZXJlbmNlcy9tb2JpbGUvY29tLmFwcGxlLndlYmNvbnRlbnRmaWx0ZXIucGxpc3Qi KSkKIAorKGFsbG93IGZpbGUtcmVhZC1kYXRhCisgICAgKGxpdGVyYWwgIi91c3IvbG9jYWwvbGli L2xvZyIpIDsgPHJkYXI6Ly9wcm9ibGVtLzM2NjI5NDk1PgorKQorCiA7OyBBbGxvdyBtZWRpYXNl cnZlcmQgdG8gaXNzdWUgZmlsZSBleHRlbnNpb25zIGZvciB0aGUgcHVycG9zZXMgb2YgcmVhZGlu ZyBtZWRpYQogKGFsbG93IGZpbGUtaXNzdWUtZXh0ZW5zaW9uIChyZXF1aXJlLWFsbAogICAgIChl eHRlbnNpb24gImNvbS5hcHBsZS5hcHAtc2FuZGJveC5yZWFkIikKSW5kZXg6IFNvdXJjZS9XZWJL aXQvV2ViUHJvY2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgo9PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBT b3VyY2UvV2ViS2l0L1dlYlByb2Nlc3MvY29tLmFwcGxlLldlYlByb2Nlc3Muc2IuaW4JKHJldmlz aW9uIDIyODMzNykKKysrIFNvdXJjZS9XZWJLaXQvV2ViUHJvY2Vzcy9jb20uYXBwbGUuV2ViUHJv Y2Vzcy5zYi5pbgkod29ya2luZyBjb3B5KQpAQCAtNDM5LDYgKzQzOSw3IEBACiAgICAgKGhvbWUt c3VicGF0aCAiL0xpYnJhcnkvRGljdGlvbmFyaWVzIikpCiAKIChhbGxvdyBmaWxlLXJlYWQtZGF0 YQorICAgIChsaXRlcmFsICIvdXNyL2xvY2FsL2xpYi9sb2ciKSA7IDxyZGFyOi8vcHJvYmxlbS8z NjYyOTQ5NT4KICAgICA7OyBOZWVkZWQgZm9yIEFFUzMgc3VwcG9ydAogICAgIChzdWJwYXRoICIv TGlicmFyeS9BdWRpby9QbHVnLUlucy9Db21wb25lbnRzIikpCiAK