<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>207708</bug_id>
          
          <creation_ts>2020-02-13 10:13:24 -0800</creation_ts>
          <short_desc>[iOS] Remove access to the &quot;com.apple.lsd.open&quot; mach service from the WebContent process</short_desc>
          <delta_ts>2020-02-28 11:57:56 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit2</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          <dependson>205316</dependson>
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Brent Fulgham">bfulgham</reporter>
          <assigned_to name="Brent Fulgham">bfulgham</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>commit-queue</cc>
    
    <cc>pvollan</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1618566</commentid>
    <comment_count>0</comment_count>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2020-02-13 10:13:24 -0800</bug_when>
    <thetext>We now dynamically connect to the &apos;com.apple.lsd.open&apos; mach service when clients need it, so we no longer need the global permission to use the service.

We should remove it from our sandbox.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1618567</commentid>
    <comment_count>1</comment_count>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2020-02-13 10:13:59 -0800</bug_when>
    <thetext>&lt;rdar://problem/56995506&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1618574</commentid>
    <comment_count>2</comment_count>
      <attachid>390665</attachid>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2020-02-13 10:21:44 -0800</bug_when>
    <thetext>Created attachment 390665
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1618595</commentid>
    <comment_count>3</comment_count>
      <attachid>390665</attachid>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2020-02-13 11:01:53 -0800</bug_when>
    <thetext>Comment on attachment 390665
Patch

R=me. There still seems to be some rare cases of access to lsd.open from the WebContent process. Should we hold off landing until we have a backtrace for those accesses?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1623997</commentid>
    <comment_count>4</comment_count>
      <attachid>391992</attachid>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2020-02-28 10:41:26 -0800</bug_when>
    <thetext>Created attachment 391992
Patch for landing</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1624034</commentid>
    <comment_count>5</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2020-02-28 11:21:07 -0800</bug_when>
    <thetext>The commit-queue encountered the following flaky tests while processing attachment 391992:

editing/spelling/spellcheck-async-remove-frame.html bug 158401 (authors: morrita@google.com, rniwa@webkit.org, and tony@chromium.org)
The commit-queue is continuing to process your patch.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1624037</commentid>
    <comment_count>6</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2020-02-28 11:21:33 -0800</bug_when>
    <thetext>The commit-queue encountered the following flaky tests while processing attachment 391992:

editing/spelling/spellcheck-input-search-crash.html bug 207995 (authors: arv@chromium.org, g.czajkowski@samsung.com, mark.lam@apple.com, and morrita@google.com)
The commit-queue is continuing to process your patch.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1624062</commentid>
    <comment_count>7</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2020-02-28 11:57:21 -0800</bug_when>
    <thetext>The commit-queue encountered the following flaky tests while processing attachment 391992:

http/tests/security/contentSecurityPolicy/report-status-code-zero-when-using-https.html bug 197297 (author: dbates@webkit.org)
The commit-queue is continuing to process your patch.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1624063</commentid>
    <comment_count>8</comment_count>
      <attachid>391992</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2020-02-28 11:57:54 -0800</bug_when>
    <thetext>Comment on attachment 391992
Patch for landing

Clearing flags on attachment: 391992

Committed r257650: &lt;https://trac.webkit.org/changeset/257650&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1624064</commentid>
    <comment_count>9</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2020-02-28 11:57:56 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>390665</attachid>
            <date>2020-02-13 10:21:44 -0800</date>
            <delta_ts>2020-02-28 10:41:25 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-207708-20200213102143.patch</filename>
            <type>text/plain</type>
            <size>2355</size>
            <attacher name="Brent Fulgham">bfulgham</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjU2NTIwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>391992</attachid>
            <date>2020-02-28 10:41:26 -0800</date>
            <delta_ts>2020-02-28 11:57:54 -0800</delta_ts>
            <desc>Patch for landing</desc>
            <filename>bug-207708-20200228104126.patch</filename>
            <type>text/plain</type>
            <size>2339</size>
            <attacher name="Brent Fulgham">bfulgham</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjU3NjQxCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No
YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IGExMWExMDNiZDBlZDczNmNm
YWY3OGE5NTNkNThiZWNkMGNlYTUwMDQuLjA5N2Y0MjQ5NjIyZDg0YTE2ZDlhY2I0MmJhNzIxMDM5
OWM3ZDExYzMgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj
ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTkgQEAKKzIwMjAtMDItMjggIEJyZW50IEZ1
bGdoYW0gIDxiZnVsZ2hhbUBhcHBsZS5jb20+CisKKyAgICAgICAgW2lPU10gUmVtb3ZlIGFjY2Vz
cyB0byB0aGUgImNvbS5hcHBsZS5sc2Qub3BlbiIgbWFjaCBzZXJ2aWNlIGZyb20gdGhlIFdlYkNv
bnRlbnQgcHJvY2VzcworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5j
Z2k/aWQ9MjA3NzA4CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS81Njk5NTUwNj4KKworICAgICAg
ICBSZXZpZXdlZCBieSBQZXIgQXJuZSBWb2xsYW4uCisKKyAgICAgICAgTm93IHRoYXQgd2UgZHlu
YW1pY2FsbHkgY3JlYXRlIHRoZSBzYW5kYm94IGV4dGVuc2lvbiB0byB0aGUgJ2NvbS5hcHBsZS5s
c2Qub3BlbicgbWFjaCBzZXJ2aWNlLAorICAgICAgICB3ZSBjYW4gcmVtb3ZlIHRoZSBnbG9iYWwg
YWxsb3cgcnVsZSBmcm9tIHRoZSBzYW5kYm94LgorIAorICAgICAgICBSZXZpZXdlZCBieSBQZXIg
QXJuZSBWb2xsYW4uCisKKyAgICAgICAgKiBSZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9j
b20uYXBwbGUuV2ViS2l0LkdQVS5zYjoKKyAgICAgICAgKiBSZXNvdXJjZXMvU2FuZGJveFByb2Zp
bGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQuc2I6CisKIDIwMjAtMDItMjggIFlv
dWVubiBGYWJsZXQgIDx5b3Vlbm5AYXBwbGUuY29tPgogCiAgICAgICAgIENvbnZlcnNpb24gYmV0
d2VlbiBNZWRpYVNhbXBsZSBhbmQgUmVtb3RlVmlkZW9TYW1wbGUgc2hvdWxkIHByZXNlcnZlIHRo
ZSByb3RhdGlvbiBpbmZvcm1hdGlvbgpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYktpdC9SZXNvdXJj
ZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LkdQVS5zYiBiL1NvdXJjZS9X
ZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5HUFUu
c2IKaW5kZXggZmY0MGUzODc4MmZkYjY4ZGViZDM0OTVlNzAwYzM5YWNhYThlNzJkMy4uOTQzZDZh
MTk1YjU5ZTQ3NDQyMWVkYjY5MDY5YjY0Mzg2NDBjNzhjMyAxMDA2NDQKLS0tIGEvU291cmNlL1dl
YktpdC9SZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LkdQVS5z
YgorKysgYi9Tb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5h
cHBsZS5XZWJLaXQuR1BVLnNiCkBAIC01OTAsNyArNTkwLDYgQEAKICAgICAgICAoaXBjLXBvc2l4
LW5hbWUtcHJlZml4ICJhcHBsZS5jZnByZWZzLiIpKQogIAogKGFsbG93IG1hY2gtbG9va3VwICh3
aXRoIHJlcG9ydCkgKHdpdGggdGVsZW1ldHJ5KQotICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxl
LmxzZC5vcGVuIikKICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5sc2QubWFwZGIiKSkKIAog
OzsgPHJkYXI6Ly9wcm9ibGVtLzEyNDEzOTQyPgpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYktpdC9S
ZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQu
c2IgYi9Tb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBs
ZS5XZWJLaXQuV2ViQ29udGVudC5zYgppbmRleCAyMjA4NTEzZTNkOTBhNWExMDBiNmI0YjcyN2Jk
ZjVmOGM5ZjdiZmM0Li4yZmU1NjM5N2E4NzY3NTJiNWY0NDcxOGI2NmIwOWE3YWU5MGM3YmMyIDEw
MDY0NAotLS0gYS9Tb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2Nv
bS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYgorKysgYi9Tb3VyY2UvV2ViS2l0L1Jlc291cmNl
cy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYgpAQCAt
NTQ1LDcgKzU0NSw2IEBACiAgICAgICAgKGlwYy1wb3NpeC1uYW1lLXByZWZpeCAiYXBwbGUuY2Zw
cmVmcy4iKSkKICAKIChhbGxvdyBtYWNoLWxvb2t1cCAod2l0aCB0ZWxlbWV0cnktYmFja3RyYWNl
KQotICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLmxzZC5vcGVuIikKICAgICAoZ2xvYmFsLW5h
bWUgImNvbS5hcHBsZS5sc2QubWFwZGIiKSkKIAogOzsgPHJkYXI6Ly9wcm9ibGVtLzEyNDEzOTQy
Pgo=
</data>

          </attachment>
      

    </bug>

</bugzilla>