206098 2020-01-10 14:44:22 -0800 [iOS] Remove access to 'awd' directories 2020-01-23 13:15:01 -0800 1 1 1 Unclassified WebKit WebKit2 WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 206095 1 bfulgham bfulgham bfulgham commit-queue pvollan webkit-bug-importer oldest_to_newest 1605314 0 bfulgham 2020-01-10 14:44:22 -0800 Confirm that we no longer touch these directories, then remove them from the sandbox. 1605315 1 webkit-bug-importer 2020-01-10 14:44:44 -0800 <rdar://problem/58491816> 1605332 2 pvollan 2020-01-10 15:11:09 -0800 Are we also ready to block mach lookup access to awdd? 1605333 3 bfulgham 2020-01-10 15:12:51 -0800 (In reply to Per Arne Vollan from comment #2) > Are we also ready to block mach lookup access to awdd? That's in Bug 206095. Once we block (in that bug), I suspect we can remove this access. But I didn't want to do it in one patch, because I don't think we've adequately tested the lack of these directory access rules. 1610251 4 388575 bfulgham 2020-01-23 12:14:17 -0800 Created attachment 388575 Patch 1610252 5 388576 bfulgham 2020-01-23 12:16:48 -0800 Created attachment 388576 Patch 1610267 6 388576 pvollan 2020-01-23 12:50:52 -0800 Comment on attachment 388576 Patch R=me. 1610284 7 388576 commit-queue 2020-01-23 13:15:00 -0800 Comment on attachment 388576 Patch Clearing flags on attachment: 388576 Committed r254999: <https://trac.webkit.org/changeset/254999> 1610285 8 commit-queue 2020-01-23 13:15:01 -0800 All reviewed patches have been landed. Closing bug. 388575 2020-01-23 12:14:17 -0800 2020-01-23 12:16:46 -0800 Patch bug-206098-20200123121416.patch text/plain 2173 bfulgham U3VidmVyc2lvbiBSZXZpc2lvbjogMjU0OTk0CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IGY3ODk4NGVjZDI3MGZmMWMx MDYyZjU4NTA0ZWZlNGYyNmMyOWM1ODQuLmRkNDc4MzliYTVmNzZlMzZmMzA2NmE1MDk2NWRhMTJh NTg4YjY4OWIgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTggQEAKKzIwMjAtMDEtMjMgIEJyZW50IEZ1 bGdoYW0gIDxiZnVsZ2hhbUBhcHBsZS5jb20+CisKKyAgICAgICAgW2lPU10gUmVtb3ZlIGFjY2Vz cyB0byAnYXdkJyBkaXJlY3RvcmllcworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9z aG93X2J1Zy5jZ2k/aWQ9MjA2MDk4CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS81ODQ5MTgxNj4K KworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBOb3cgdGhh dCB3ZSBoYXZlIHJlbW92ZWQgJ2F3ZCcgZmVhdHVyZXMgZnJvbSB0aGUgV2ViQ29udGVudCBwcm9j ZXNzLCBhbmQgaGF2ZSBibG9ja2VkIGFjY2VzcyB0byB0aGUKKyAgICAgICAgbWFjaCBzZXJ2aWNl LCB3ZSBzaG91bGQgcmVtb3ZlIHRoZSBhYmlsaXR5IHRvIGludGVyYWN0IHdpdGggdGhlICdhd2Qn IGRpcmVjdG9yaWVzIG9uIGRldmljZS4KKworICAgICAgICBObyBuZXcgdGVzdHMuIE5vIGNoYW5n ZSBpbiBiZWhhdmlvci4KKworICAgICAgICAqIFJlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9z L2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYjoKKwogMjAyMC0wMS0yMyAgUnlhbiBIYWRk YWQgIDxyeWFuaGFkZGFkQGFwcGxlLmNvbT4KIAogICAgICAgICBVbnJldmlld2VkLCByb2xsaW5n IG91dCByMjU0OTkwLgpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYktpdC9SZXNvdXJjZXMvU2FuZGJv eFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQuc2IgYi9Tb3VyY2UvV2Vi S2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29u dGVudC5zYgppbmRleCBiZDk2NDcwYmZjOTU3ZDFjNzgyZjEwZjVmNzA5MTQ1YTZkYTNmMGJjLi5i M2RiYzdjMDU4MjIzNDRiNDU5YmFkNzNiY2I0NGE3OWJhODE0ZGIyIDEwMDY0NAotLS0gYS9Tb3Vy Y2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQu V2ViQ29udGVudC5zYgorKysgYi9Tb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmls ZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYgpAQCAtMzYyLDE0ICszNjIsNiBA QAogICAgIChhbGxvdyBmaWxlLXJlYWQqIGZpbGUtd3JpdGUtZGF0YSBmaWxlLWlvY3RsCiAgICAg ICAgICAgIChsaXRlcmFsICIvZGV2L2Flc18wIikpKQogCi0oZGVmaW5lLW9uY2UgKGF3ZC1sb2ct ZGlyZWN0b3J5IGRhZW1vbi1uYW1lKQotICAgIChsZXQqCi0gICAgICAgICgoYmFzZS1kaXJlY3Rv cnkgKGhvbWUtcmVsYXRpdmUtcGF0aCAiL0xpYnJhcnkvTG9ncy9hd2QiKSkpCi0gICAgICAgIChh bGxvdy1jcmVhdGUtZGlyZWN0b3J5IChsaXRlcmFsIGJhc2UtZGlyZWN0b3J5KSkKLSAgICAgICAg KGFsbG93IGZpbGUtcmVhZCogZmlsZS13cml0ZSoKLSAgICAgICAgICAgIChwcmVmaXggKHN0cmlu Zy1hcHBlbmQgYmFzZS1kaXJlY3RvcnkgIi9hd2QtIiBkYWVtb24tbmFtZSAiLmxvZyIpKSkKLSkp Ci0KIChkZWZpbmUtb25jZSAobG9nZC1kaWFnbm9zdGljLXBhdGhzKQogICAgIChyZXF1aXJlLWFu eQogICAgICAgICAoc3VicGF0aCAiL3ByaXZhdGUvdmFyL2RiL2RpYWdub3N0aWNzIikKQEAgLTky Miw5ICs5MTQsNiBAQAogOzsgQWxsb3cgbG9hZGluZyBpbmplY3RlZCBidW5kbGVzLgogKGFsbG93 IGZpbGUtbWFwLWV4ZWN1dGFibGUpCiAKLTs7IEFXRCBsb2dnaW5nCi0oYXdkLWxvZy1kaXJlY3Rv cnkgImNvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudCIpCi0KIDs7IEFsbG93IE1hbmFnZWRQcmVm ZXJlbmNlIGFjY2VzcwogKGFsbG93IGZpbGUtcmVhZCogKGxpdGVyYWwgIi9wcml2YXRlL3Zhci9N YW5hZ2VkIFByZWZlcmVuY2VzL21vYmlsZS9jb20uYXBwbGUud2ViY29udGVudGZpbHRlci5wbGlz dCIpKQogCg== 388576 2020-01-23 12:16:48 -0800 2020-01-23 13:15:00 -0800 Patch bug-206098-20200123121647.patch text/plain 3563 bfulgham U3VidmVyc2lvbiBSZXZpc2lvbjogMjU0OTk0CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IGY3ODk4NGVjZDI3MGZmMWMx MDYyZjU4NTA0ZWZlNGYyNmMyOWM1ODQuLmIxMGI3MmMzMWVlMWM2N2NlNjQ2NDJkZTJjZjg4YzFk OWI2ZWEyZjIgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTkgQEAKKzIwMjAtMDEtMjMgIEJyZW50IEZ1 bGdoYW0gIDxiZnVsZ2hhbUBhcHBsZS5jb20+CisKKyAgICAgICAgW2lPU10gUmVtb3ZlIGFjY2Vz cyB0byAnYXdkJyBkaXJlY3RvcmllcworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9z aG93X2J1Zy5jZ2k/aWQ9MjA2MDk4CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS81ODQ5MTgxNj4K KworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBOb3cgdGhh dCB3ZSBoYXZlIHJlbW92ZWQgJ2F3ZCcgZmVhdHVyZXMgZnJvbSB0aGUgV2ViQ29udGVudCBwcm9j ZXNzLCBhbmQgaGF2ZSBibG9ja2VkIGFjY2VzcyB0byB0aGUKKyAgICAgICAgbWFjaCBzZXJ2aWNl LCB3ZSBzaG91bGQgcmVtb3ZlIHRoZSBhYmlsaXR5IHRvIGludGVyYWN0IHdpdGggdGhlICdhd2Qn IGRpcmVjdG9yaWVzIG9uIGRldmljZS4KKworICAgICAgICBObyBuZXcgdGVzdHMuIE5vIGNoYW5n ZSBpbiBiZWhhdmlvci4KKworICAgICAgICAqIFJlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9z L2NvbS5hcHBsZS5XZWJLaXQuR1BVLnNiOgorICAgICAgICAqIFJlc291cmNlcy9TYW5kYm94UHJv ZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYjoKKwogMjAyMC0wMS0yMyAg UnlhbiBIYWRkYWQgIDxyeWFuaGFkZGFkQGFwcGxlLmNvbT4KIAogICAgICAgICBVbnJldmlld2Vk LCByb2xsaW5nIG91dCByMjU0OTkwLgpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYktpdC9SZXNvdXJj ZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LkdQVS5zYiBiL1NvdXJjZS9X ZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5HUFUu c2IKaW5kZXggN2Q2MTQyNTNlM2Y5NjVlMzA5NzcwMjhlYTY3YTlhMzVjNGMxMzQyMi4uYzgwZjRh YzRhZTViZWE2OGM2MmYwYWM3ZGM3YTg1MTI0MTJmMDUzNSAxMDA2NDQKLS0tIGEvU291cmNlL1dl YktpdC9SZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LkdQVS5z YgorKysgYi9Tb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5h cHBsZS5XZWJLaXQuR1BVLnNiCkBAIC0zNDgsMTUgKzM0OCw2IEBACiAgICAgKGFsbG93IGZpbGUt cmVhZCogZmlsZS13cml0ZS1kYXRhIGZpbGUtaW9jdGwKICAgICAgICAgICAgKGxpdGVyYWwgIi9k ZXYvYWVzXzAiKSkpCiAKLShkZWZpbmUtb25jZSAoYXdkLWxvZy1kaXJlY3RvcnkgZGFlbW9uLW5h bWUpCi0gICAgKGxldCoKLSAgICAgICAgKChiYXNlLWRpcmVjdG9yeSAoaG9tZS1yZWxhdGl2ZS1w YXRoICIvTGlicmFyeS9Mb2dzL2F3ZCIpKSkKLSAgICAgICAgKGFsbG93LWNyZWF0ZS1kaXJlY3Rv cnkgKGxpdGVyYWwgYmFzZS1kaXJlY3RvcnkpKQotICAgICAgICAoYWxsb3cgZmlsZS1yZWFkKiBm aWxlLXdyaXRlKgotICAgICAgICAgICAgKHByZWZpeCAoc3RyaW5nLWFwcGVuZCBiYXNlLWRpcmVj dG9yeSAiL2F3ZC0iIGRhZW1vbi1uYW1lICIubG9nIikpKQotICAgICAgICAoYWxsb3cgbWFjaC1s b29rdXAgKHdpdGggcmVwb3J0KSAod2l0aCB0ZWxlbWV0cnkpCi0gICAgICAgICAgICAgICAoZ2xv YmFsLW5hbWUgImNvbS5hcHBsZS5hd2RkIikpKSkKLQogKGRlZmluZS1vbmNlIChsb2dkLWRpYWdu b3N0aWMtcGF0aHMpCiAgICAgKHJlcXVpcmUtYW55CiAgICAgICAgIChzdWJwYXRoICIvcHJpdmF0 ZS92YXIvZGIvZGlhZ25vc3RpY3MiKQpAQCAtOTE2LDkgKzkwNyw2IEBACiA7OyBBbGxvdyBsb2Fk aW5nIGluamVjdGVkIGJ1bmRsZXMuCiAoYWxsb3cgZmlsZS1tYXAtZXhlY3V0YWJsZSkKIAotOzsg QVdEIGxvZ2dpbmcKLShhd2QtbG9nLWRpcmVjdG9yeSAiY29tLmFwcGxlLldlYktpdC5XZWJDb250 ZW50IikKLQogOzsgQWxsb3cgTWFuYWdlZFByZWZlcmVuY2UgYWNjZXNzCiAoYWxsb3cgZmlsZS1y ZWFkKiAobGl0ZXJhbCAiL3ByaXZhdGUvdmFyL01hbmFnZWQgUHJlZmVyZW5jZXMvbW9iaWxlL2Nv bS5hcHBsZS53ZWJjb250ZW50ZmlsdGVyLnBsaXN0IikpCiAKZGlmZiAtLWdpdCBhL1NvdXJjZS9X ZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5XZWJD b250ZW50LnNiIGIvU291cmNlL1dlYktpdC9SZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9j b20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQuc2IKaW5kZXggYmQ5NjQ3MGJmYzk1N2QxYzc4MmYx MGY1ZjcwOTE0NWE2ZGEzZjBiYy4uYjNkYmM3YzA1ODIyMzQ0YjQ1OWJhZDczYmNiNDRhNzliYTgx NGRiMiAxMDA2NDQKLS0tIGEvU291cmNlL1dlYktpdC9SZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVz L2lvcy9jb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQuc2IKKysrIGIvU291cmNlL1dlYktpdC9S ZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQu c2IKQEAgLTM2MiwxNCArMzYyLDYgQEAKICAgICAoYWxsb3cgZmlsZS1yZWFkKiBmaWxlLXdyaXRl LWRhdGEgZmlsZS1pb2N0bAogICAgICAgICAgICAobGl0ZXJhbCAiL2Rldi9hZXNfMCIpKSkKIAot KGRlZmluZS1vbmNlIChhd2QtbG9nLWRpcmVjdG9yeSBkYWVtb24tbmFtZSkKLSAgICAobGV0Kgot ICAgICAgICAoKGJhc2UtZGlyZWN0b3J5IChob21lLXJlbGF0aXZlLXBhdGggIi9MaWJyYXJ5L0xv Z3MvYXdkIikpKQotICAgICAgICAoYWxsb3ctY3JlYXRlLWRpcmVjdG9yeSAobGl0ZXJhbCBiYXNl LWRpcmVjdG9yeSkpCi0gICAgICAgIChhbGxvdyBmaWxlLXJlYWQqIGZpbGUtd3JpdGUqCi0gICAg ICAgICAgICAocHJlZml4IChzdHJpbmctYXBwZW5kIGJhc2UtZGlyZWN0b3J5ICIvYXdkLSIgZGFl bW9uLW5hbWUgIi5sb2ciKSkpCi0pKQotCiAoZGVmaW5lLW9uY2UgKGxvZ2QtZGlhZ25vc3RpYy1w YXRocykKICAgICAocmVxdWlyZS1hbnkKICAgICAgICAgKHN1YnBhdGggIi9wcml2YXRlL3Zhci9k Yi9kaWFnbm9zdGljcyIpCkBAIC05MjIsOSArOTE0LDYgQEAKIDs7IEFsbG93IGxvYWRpbmcgaW5q ZWN0ZWQgYnVuZGxlcy4KIChhbGxvdyBmaWxlLW1hcC1leGVjdXRhYmxlKQogCi07OyBBV0QgbG9n Z2luZwotKGF3ZC1sb2ctZGlyZWN0b3J5ICJjb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQiKQot CiA7OyBBbGxvdyBNYW5hZ2VkUHJlZmVyZW5jZSBhY2Nlc3MKIChhbGxvdyBmaWxlLXJlYWQqIChs aXRlcmFsICIvcHJpdmF0ZS92YXIvTWFuYWdlZCBQcmVmZXJlbmNlcy9tb2JpbGUvY29tLmFwcGxl LndlYmNvbnRlbnRmaWx0ZXIucGxpc3QiKSkKIAo=