<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>220321</bug_id>
          
          <creation_ts>2021-01-05 05:10:17 -0800</creation_ts>
          <short_desc>[macOS] Deny mach-lookup to the service &apos;com.apple.hiservices-xpcservice&apos; in the WebContent process</short_desc>
          <delta_ts>2021-01-23 07:30:23 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit Misc.</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Per Arne Vollan">pvollan</reporter>
          <assigned_to name="Per Arne Vollan">pvollan</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>darin</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1717281</commentid>
    <comment_count>0</comment_count>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2021-01-05 05:10:17 -0800</bug_when>
    <thetext>Deny mach-lookup to the service &apos;com.apple.hiservices-xpcservice&apos; in the WebContent process on macOS, since there are no longer any reports of this service being used.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1717282</commentid>
    <comment_count>1</comment_count>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2021-01-05 05:10:40 -0800</bug_when>
    <thetext>&lt;rdar://problem/68878470&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1717286</commentid>
    <comment_count>2</comment_count>
      <attachid>416993</attachid>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2021-01-05 05:14:57 -0800</bug_when>
    <thetext>Created attachment 416993
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1717475</commentid>
    <comment_count>3</comment_count>
    <who name="Per Arne Vollan">pvollan</who>
    <bug_when>2021-01-05 14:23:40 -0800</bug_when>
    <thetext>Thanks for reviewing!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1721842</commentid>
    <comment_count>4</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2021-01-23 07:30:22 -0800</bug_when>
    <thetext>Committed r271777: &lt;https://trac.webkit.org/changeset/271777&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 416993.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>416993</attachid>
            <date>2021-01-05 05:14:57 -0800</date>
            <delta_ts>2021-01-23 07:30:23 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-220321-20210105141456.patch</filename>
            <type>text/plain</type>
            <size>6091</size>
            <attacher name="Per Arne Vollan">pvollan</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL
aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyNzExNDUpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv
Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBACisyMDIxLTAxLTA1ICBQZXIgQXJuZSBW
b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbbWFjT1NdIERlbnkgbWFjaC1s
b29rdXAgdG8gdGhlIHNlcnZpY2UgJ2NvbS5hcHBsZS5oaXNlcnZpY2VzLXhwY3NlcnZpY2UnIGlu
IHRoZSBXZWJDb250ZW50IHByb2Nlc3MKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcv
c2hvd19idWcuY2dpP2lkPTIyMDMyMQorICAgICAgICA8cmRhcjovL3Byb2JsZW0vNjg4Nzg0NzA+
CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgRGVueSBt
YWNoLWxvb2t1cCB0byB0aGUgc2VydmljZSAnY29tLmFwcGxlLmhpc2VydmljZXMteHBjc2Vydmlj
ZScgaW4gdGhlIFdlYkNvbnRlbnQgcHJvY2VzcyBvbiBtYWNPUywKKyAgICAgICAgc2luY2UgdGhl
cmUgYXJlIG5vIGxvbmdlciBhbnkgcmVwb3J0cyBvZiB0aGlzIHNlcnZpY2UgYmVpbmcgdXNlZC4K
KworICAgICAgICBUZXN0OiBmYXN0L3NhbmRib3gvbWFjL3NhbmRib3gtbWFjaC1sb29rdXAuaHRt
bAorCisgICAgICAgICogV2ViUHJvY2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbjoKKwog
MjAyMS0wMS0wNCAgSmVmZiBNaWxsZXIgIDxqZWZmbUBhcHBsZS5jb20+CiAKICAgICAgICAgVXBk
YXRlIHVzZXItdmlzaWJsZSBjb3B5cmlnaHQgc3RyaW5ncyB0byBpbmNsdWRlIDIwMjEKSW5kZXg6
IFNvdXJjZS9XZWJLaXQvV2ViUHJvY2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgo9PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09Ci0tLSBTb3VyY2UvV2ViS2l0L1dlYlByb2Nlc3MvY29tLmFwcGxlLldlYlByb2Nlc3Mu
c2IuaW4JKHJldmlzaW9uIDI3MTEyNykKKysrIFNvdXJjZS9XZWJLaXQvV2ViUHJvY2Vzcy9jb20u
YXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgkod29ya2luZyBjb3B5KQpAQCAtNjQyLDcgKzY0Miw2IEBA
CiAgICAgKHdpdGggcmVwb3J0KSAod2l0aCB0ZWxlbWV0cnktYmFja3RyYWNlKQogI2VuZGlmCiAg
ICAgKHhwYy1zZXJ2aWNlLW5hbWUgImNvbS5hcHBsZS5hdWRpby5TYW5kYm94SGVscGVyIikKLSAg
ICAoeHBjLXNlcnZpY2UtbmFtZSAiY29tLmFwcGxlLmhpc2VydmljZXMteHBjc2VydmljZSIpCiAj
aWYgX19NQUNfT1NfWF9WRVJTSU9OX01JTl9SRVFVSVJFRCA8PSAxMTAwMDAKICAgICAoeHBjLXNl
cnZpY2UtbmFtZSAiY29tLmFwcGxlLnByaW50Lm5vcm1hbGl6ZXJkIikKICNlbmRpZgpJbmRleDog
TGF5b3V0VGVzdHMvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL0NoYW5nZUxv
ZwkocmV2aXNpb24gMjcxMTI3KQorKysgTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCSh3b3JraW5nIGNv
cHkpCkBAIC0xLDMgKzEsMTYgQEAKKzIwMjEtMDEtMDUgIFBlciBBcm5lIFZvbGxhbiAgPHB2b2xs
YW5AYXBwbGUuY29tPgorCisgICAgICAgIFttYWNPU10gRGVueSBtYWNoLWxvb2t1cCB0byB0aGUg
c2VydmljZSAnY29tLmFwcGxlLmhpc2VydmljZXMteHBjc2VydmljZScgaW4gdGhlIFdlYkNvbnRl
bnQgcHJvY2VzcworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/
aWQ9MjIwMzIxCisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS82ODg3ODQ3MD4KKworICAgICAgICBS
ZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICAqIGZhc3Qvc2FuZGJveC9tYWMv
c2FuZGJveC1tYWNoLWxvb2t1cC1leHBlY3RlZC50eHQ6CisgICAgICAgICogZmFzdC9zYW5kYm94
L21hYy9zYW5kYm94LW1hY2gtbG9va3VwLmh0bWw6CisgICAgICAgICogcGxhdGZvcm0vbWFjLWNh
dGFsaW5hL2Zhc3Qvc2FuZGJveC9tYWMvc2FuZGJveC1tYWNoLWxvb2t1cC1leHBlY3RlZC50eHQ6
CisgICAgICAgICogcGxhdGZvcm0vbWFjLW1vamF2ZS9mYXN0L3NhbmRib3gvbWFjL3NhbmRib3gt
bWFjaC1sb29rdXAtZXhwZWN0ZWQudHh0OgorCiAyMDIxLTAxLTAzICBSb2IgQnVpcyAgPHJidWlz
QGlnYWxpYS5jb20+CiAKICAgICAgICAgVXNlIFVURi04IGVuY29kaW5nIGZvciBlbXB0eSBtYWlu
IHJlc291cmNlIGxvYWRzCkluZGV4OiBMYXlvdXRUZXN0cy9mYXN0L3NhbmRib3gvbWFjL3NhbmRi
b3gtbWFjaC1sb29rdXAtZXhwZWN0ZWQudHh0Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2Zh
c3Qvc2FuZGJveC9tYWMvc2FuZGJveC1tYWNoLWxvb2t1cC1leHBlY3RlZC50eHQJKHJldmlzaW9u
IDI3MTEyNykKKysrIExheW91dFRlc3RzL2Zhc3Qvc2FuZGJveC9tYWMvc2FuZGJveC1tYWNoLWxv
b2t1cC1leHBlY3RlZC50eHQJKHdvcmtpbmcgY29weSkKQEAgLTEzLDQgKzEzLDUgQEAgUEFTUyBp
bnRlcm5hbHMuaGFzU2FuZGJveE1hY2hMb29rdXBBY2NlcwogUEFTUyBpbnRlcm5hbHMuaGFzU2Fu
ZGJveE1hY2hMb29rdXBBY2Nlc3NUb0dsb2JhbE5hbWUoImNvbS5hcHBsZS5XZWJLaXQuV2ViQ29u
dGVudCIsICJjb20uYXBwbGUuY29va2llZCIpIGlzIGZhbHNlCiBQQVNTIGludGVybmFscy5oYXNT
YW5kYm94TWFjaExvb2t1cEFjY2Vzc1RvR2xvYmFsTmFtZSgiY29tLmFwcGxlLldlYktpdC5XZWJD
b250ZW50IiwgImNvbS5hcHBsZS5hdWRpby5TeXN0ZW1Tb3VuZFNlcnZlci1PU1giKSBpcyBmYWxz
ZQogUEFTUyBpbnRlcm5hbHMuaGFzU2FuZGJveE1hY2hMb29rdXBBY2Nlc3NUb1hQQ1NlcnZpY2VO
YW1lKCJjb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQiLCAiY29tLmFwcGxlLlBlcmZvcm1hbmNl
QW5hbHlzaXMuYW5pbWF0aW9ucGVyZmQiKSBpcyBmYWxzZQorUEFTUyBpbnRlcm5hbHMuaGFzU2Fu
ZGJveE1hY2hMb29rdXBBY2Nlc3NUb1hQQ1NlcnZpY2VOYW1lKCJjb20uYXBwbGUuV2ViS2l0Lldl
YkNvbnRlbnQiLCAiY29tLmFwcGxlLmhpc2VydmljZXMteHBjc2VydmljZSIpIGlzIGZhbHNlCiAK
SW5kZXg6IExheW91dFRlc3RzL2Zhc3Qvc2FuZGJveC9tYWMvc2FuZGJveC1tYWNoLWxvb2t1cC5o
dG1sCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2Zhc3Qvc2FuZGJveC9tYWMvc2FuZGJveC1t
YWNoLWxvb2t1cC5odG1sCShyZXZpc2lvbiAyNzExMjcpCisrKyBMYXlvdXRUZXN0cy9mYXN0L3Nh
bmRib3gvbWFjL3NhbmRib3gtbWFjaC1sb29rdXAuaHRtbAkod29ya2luZyBjb3B5KQpAQCAtMTYs
NiArMTYsNyBAQCBpZiAod2luZG93LmludGVybmFscykgewogICAgIHNob3VsZEJlRmFsc2UoImlu
dGVybmFscy5oYXNTYW5kYm94TWFjaExvb2t1cEFjY2Vzc1RvR2xvYmFsTmFtZShcImNvbS5hcHBs
ZS5XZWJLaXQuV2ViQ29udGVudFwiLCBcImNvbS5hcHBsZS5jb29raWVkXCIpIik7CiAgICAgc2hv
dWxkQmVGYWxzZSgiaW50ZXJuYWxzLmhhc1NhbmRib3hNYWNoTG9va3VwQWNjZXNzVG9HbG9iYWxO
YW1lKFwiY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50XCIsIFwiY29tLmFwcGxlLmF1ZGlvLlN5
c3RlbVNvdW5kU2VydmVyLU9TWFwiKSIpOwogICAgIHNob3VsZEJlRmFsc2UoImludGVybmFscy5o
YXNTYW5kYm94TWFjaExvb2t1cEFjY2Vzc1RvWFBDU2VydmljZU5hbWUoXCJjb20uYXBwbGUuV2Vi
S2l0LldlYkNvbnRlbnRcIiwgXCJjb20uYXBwbGUuUGVyZm9ybWFuY2VBbmFseXNpcy5hbmltYXRp
b25wZXJmZFwiKSIpOworICAgIHNob3VsZEJlRmFsc2UoImludGVybmFscy5oYXNTYW5kYm94TWFj
aExvb2t1cEFjY2Vzc1RvWFBDU2VydmljZU5hbWUoXCJjb20uYXBwbGUuV2ViS2l0LldlYkNvbnRl
bnRcIiwgXCJjb20uYXBwbGUuaGlzZXJ2aWNlcy14cGNzZXJ2aWNlXCIpIik7CiB9CiA8L3Njcmlw
dD4KIDwvaGVhZD4KSW5kZXg6IExheW91dFRlc3RzL3BsYXRmb3JtL21hYy1jYXRhbGluYS9mYXN0
L3NhbmRib3gvbWFjL3NhbmRib3gtbWFjaC1sb29rdXAtZXhwZWN0ZWQudHh0Cj09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0K
LS0tIExheW91dFRlc3RzL3BsYXRmb3JtL21hYy1jYXRhbGluYS9mYXN0L3NhbmRib3gvbWFjL3Nh
bmRib3gtbWFjaC1sb29rdXAtZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAyNzExMjcpCisrKyBMYXlv
dXRUZXN0cy9wbGF0Zm9ybS9tYWMtY2F0YWxpbmEvZmFzdC9zYW5kYm94L21hYy9zYW5kYm94LW1h
Y2gtbG9va3VwLWV4cGVjdGVkLnR4dAkod29ya2luZyBjb3B5KQpAQCAtMTMsNCArMTMsNSBAQCBQ
QVNTIGludGVybmFscy5oYXNTYW5kYm94TWFjaExvb2t1cEFjY2VzCiBQQVNTIGludGVybmFscy5o
YXNTYW5kYm94TWFjaExvb2t1cEFjY2Vzc1RvR2xvYmFsTmFtZSgiY29tLmFwcGxlLldlYktpdC5X
ZWJDb250ZW50IiwgImNvbS5hcHBsZS5jb29raWVkIikgaXMgZmFsc2UKIFBBU1MgaW50ZXJuYWxz
Lmhhc1NhbmRib3hNYWNoTG9va3VwQWNjZXNzVG9HbG9iYWxOYW1lKCJjb20uYXBwbGUuV2ViS2l0
LldlYkNvbnRlbnQiLCAiY29tLmFwcGxlLmF1ZGlvLlN5c3RlbVNvdW5kU2VydmVyLU9TWCIpIGlz
IGZhbHNlCiBQQVNTIGludGVybmFscy5oYXNTYW5kYm94TWFjaExvb2t1cEFjY2Vzc1RvWFBDU2Vy
dmljZU5hbWUoImNvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudCIsICJjb20uYXBwbGUuUGVyZm9y
bWFuY2VBbmFseXNpcy5hbmltYXRpb25wZXJmZCIpIGlzIGZhbHNlCitQQVNTIGludGVybmFscy5o
YXNTYW5kYm94TWFjaExvb2t1cEFjY2Vzc1RvWFBDU2VydmljZU5hbWUoImNvbS5hcHBsZS5XZWJL
aXQuV2ViQ29udGVudCIsICJjb20uYXBwbGUuaGlzZXJ2aWNlcy14cGNzZXJ2aWNlIikgaXMgZmFs
c2UKIApJbmRleDogTGF5b3V0VGVzdHMvcGxhdGZvcm0vbWFjLW1vamF2ZS9mYXN0L3NhbmRib3gv
bWFjL3NhbmRib3gtbWFjaC1sb29rdXAtZXhwZWN0ZWQudHh0Cj09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91
dFRlc3RzL3BsYXRmb3JtL21hYy1tb2phdmUvZmFzdC9zYW5kYm94L21hYy9zYW5kYm94LW1hY2gt
bG9va3VwLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMjcxMTI3KQorKysgTGF5b3V0VGVzdHMvcGxh
dGZvcm0vbWFjLW1vamF2ZS9mYXN0L3NhbmRib3gvbWFjL3NhbmRib3gtbWFjaC1sb29rdXAtZXhw
ZWN0ZWQudHh0CSh3b3JraW5nIGNvcHkpCkBAIC0xMyw0ICsxMyw1IEBAIFBBU1MgaW50ZXJuYWxz
Lmhhc1NhbmRib3hNYWNoTG9va3VwQWNjZXMKIFBBU1MgaW50ZXJuYWxzLmhhc1NhbmRib3hNYWNo
TG9va3VwQWNjZXNzVG9HbG9iYWxOYW1lKCJjb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQiLCAi
Y29tLmFwcGxlLmNvb2tpZWQiKSBpcyBmYWxzZQogUEFTUyBpbnRlcm5hbHMuaGFzU2FuZGJveE1h
Y2hMb29rdXBBY2Nlc3NUb0dsb2JhbE5hbWUoImNvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudCIs
ICJjb20uYXBwbGUuYXVkaW8uU3lzdGVtU291bmRTZXJ2ZXItT1NYIikgaXMgZmFsc2UKIFBBU1Mg
aW50ZXJuYWxzLmhhc1NhbmRib3hNYWNoTG9va3VwQWNjZXNzVG9YUENTZXJ2aWNlTmFtZSgiY29t
LmFwcGxlLldlYktpdC5XZWJDb250ZW50IiwgImNvbS5hcHBsZS5QZXJmb3JtYW5jZUFuYWx5c2lz
LmFuaW1hdGlvbnBlcmZkIikgaXMgZmFsc2UKK1BBU1MgaW50ZXJuYWxzLmhhc1NhbmRib3hNYWNo
TG9va3VwQWNjZXNzVG9YUENTZXJ2aWNlTmFtZSgiY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50
IiwgImNvbS5hcHBsZS5oaXNlcnZpY2VzLXhwY3NlcnZpY2UiKSBpcyBmYWxzZQogCg==
</data>

          </attachment>
      

    </bug>

</bugzilla>