221336 2021-02-03 09:12:03 -0800 [macOS] Remove access to com.apple.cvmsServ 2021-02-03 10:39:08 -0800 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan pvollan bfulgham webkit-bug-importer oldest_to_newest 1725166 0 pvollan 2021-02-03 09:12:03 -0800 Remove access to com.apple.cvmsServ in the WebContent process when the GPU Process is enabled. 1725174 1 pvollan 2021-02-03 09:15:53 -0800 <rdar://problem/70495789> 1725176 2 419148 pvollan 2021-02-03 09:17:26 -0800 Created attachment 419148 Patch 1725204 3 419148 bfulgham 2021-02-03 10:28:34 -0800 Comment on attachment 419148 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=419148&action=review > Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:118 > + (deny mach-lookup Is this safe to do on older OS? Should we move the precompile checks around this so we deny on 11+, but allow on older systems? 1725206 4 419148 bfulgham 2021-02-03 10:30:13 -0800 Comment on attachment 419148 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=419148&action=review r=me >> Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:118 >> + (deny mach-lookup > > Is this safe to do on older OS? Should we move the precompile checks around this so we deny on 11+, but allow on older systems? Oh! never mind. I see that this is only when the service is not extended. 1725213 5 419148 pvollan 2021-02-03 10:34:20 -0800 Comment on attachment 419148 Patch Thanks for reviewing! 1725219 6 ews-feeder 2021-02-03 10:39:07 -0800 Committed r272329: <https://trac.webkit.org/changeset/272329> All reviewed patches have been landed. Closing bug and clearing flags on attachment 419148. 419148 2021-02-03 09:17:26 -0800 2021-02-03 10:39:08 -0800 Patch bug-221336-20210203091725.patch text/plain 1290 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyNzIzMTcpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDIxLTAyLTAzICBQZXIgQXJuZSBW b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbbWFjT1NdIFJlbW92ZSBhY2Nl c3MgdG8gY29tLmFwcGxlLmN2bXNTZXJ2CisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3Jn L3Nob3dfYnVnLmNnaT9pZD0yMjEzMzYKKyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzcwNDk1Nzg5 PgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFJlbW92 ZSBhY2Nlc3MgdG8gY29tLmFwcGxlLmN2bXNTZXJ2IGluIHRoZSBXZWJDb250ZW50IHByb2Nlc3Mg d2hlbiB0aGUgR1BVIFByb2Nlc3MgaXMgZW5hYmxlZC4KKworICAgICAgICAqIFdlYlByb2Nlc3Mv Y29tLmFwcGxlLldlYlByb2Nlc3Muc2IuaW46CisKIDIwMjEtMDItMDMgIEFudG9pbmUgUXVpbnQg IDxncmFvdXRzQHdlYmtpdC5vcmc+CiAKICAgICAgICAgQWRkIGEgbG9hZGVyIGZvciA8bW9kZWw+ IHJlc291cmNlcwpJbmRleDogU291cmNlL1dlYktpdC9XZWJQcm9jZXNzL2NvbS5hcHBsZS5XZWJQ cm9jZXNzLnNiLmluCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvV2ViUHJvY2Vzcy9jb20u YXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgkocmV2aXNpb24gMjcyMjA5KQorKysgU291cmNlL1dlYktp dC9XZWJQcm9jZXNzL2NvbS5hcHBsZS5XZWJQcm9jZXNzLnNiLmluCSh3b3JraW5nIGNvcHkpCkBA IC0xMTUsOCArMTE1LDcgQEAKICAgICAgICAgICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLmN2 bXNTZXJ2IikKICAgICAgICAgKQogICAgICkKLSAgICA7OyBUaGlzIGlzIGp1c3QgZm9yIGxvZ2dp bmcuIFJlbW92ZSB3aGVuIHRoZSBHUFUgcHJvY2VzcyBpcyBlbmFibGVkIGJ5IGRlZmF1bHQuCi0g ICAgKGFsbG93IG1hY2gtbG9va3VwICh3aXRoIHJlcG9ydCkKKyAgICAoZGVueSBtYWNoLWxvb2t1 cAogI2lmIF9fTUFDX09TX1hfVkVSU0lPTl9NSU5fUkVRVUlSRUQgPj0gMTEwMDAwCiAgICAgICAg ICh3aXRoIHRlbGVtZXRyeS1iYWNrdHJhY2UpCiAjZW5kaWYK