222335 2021-02-23 15:50:44 -0800 [macOS] Allow additional syscall support in the sandbox 2021-02-23 17:02:50 -0800 1 1 1 Unclassified WebKit WebKit2 WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 bfulgham bfulgham pvollan oldest_to_newest 1732712 0 bfulgham 2021-02-23 15:50:44 -0800 We are seeing sandbox errors when some dependent frameworks created caches in the WebContent process. Some of these code paths are relevant in the Network Process, as well. We should allow this syscall access now that we understand its use, and have evaluated the risk of the syscall. 1732713 1 bfulgham 2021-02-23 15:51:32 -0800 <rdar://problem/74473824> 1732714 2 421361 bfulgham 2021-02-23 15:53:10 -0800 Created attachment 421361 Patch 1732715 3 421361 pvollan 2021-02-23 15:54:25 -0800 Comment on attachment 421361 Patch R=me. 1732734 4 ews-feeder 2021-02-23 17:02:49 -0800 Committed r273359: <https://commits.webkit.org/r273359> All reviewed patches have been landed. Closing bug and clearing flags on attachment 421361. 421361 2021-02-23 15:53:10 -0800 2021-02-23 17:02:49 -0800 Patch bug-222335-20210223155309.patch text/plain 1473 bfulgham U3VidmVyc2lvbiBSZXZpc2lvbjogMjczMzU2CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IDVmNGI0NWZjODkxYzlkYjVh ZTdkMjE3ZDIzZjg5YTlhMjNmNGRhZWMuLjhhYzc4MWFlYWFiMWYxNDQ2MmMwZTk1MWZlYTVkZDdm OGNmZmI2ZjggMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTUgQEAKKzIwMjEtMDItMjMgIEJyZW50IEZ1 bGdoYW0gIDxiZnVsZ2hhbUBhcHBsZS5jb20+CisKKyAgICAgICAgW21hY09TXSBBbGxvdyBhZGRp dGlvbmFsIHN5c2NhbGwgc3VwcG9ydCBpbiB0aGUgc2FuZGJveCAKKyAgICAgICAgaHR0cHM6Ly9i dWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIyMjMzNQorICAgICAgICA8cmRhcjovLzc0 NDczODI0PgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAg IEV4cGFuZCB0aGUgV2ViQ29udGVudCBwcm9jZXNzIHNhbmRib3ggdG8gYWxsb3cgU1lTX29wZW5f ZHByb3RlY3RlZF9ucAorCisgICAgICAgICogV2ViUHJvY2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vz cy5zYi5pbjoKKwogMjAyMS0wMi0yMyAgRnVqaWkgSGlyb25vcmkgIDxIaXJvbm9yaS5GdWppaUBz b255LmNvbT4KIAogICAgICAgICBbQ29vcmRpbmF0ZWRHcmFwaGljc10gVGhlIHdob2xlIGNvbnRl bnQgaXMgdW5uZWNlc3NhcmlseSByZXBhaW50ZWQgYnkgYW5pbWF0aW9ucyBpbiBub24tQUMgbW9k ZSBwYWdlcwpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYktpdC9XZWJQcm9jZXNzL2NvbS5hcHBsZS5X ZWJQcm9jZXNzLnNiLmluIGIvU291cmNlL1dlYktpdC9XZWJQcm9jZXNzL2NvbS5hcHBsZS5XZWJQ cm9jZXNzLnNiLmluCmluZGV4IDY1NThmNmI1MGNhNzBlZTg1ZjNhMjU3ZjQ1YmUxNDk5MDY3N2Fl MDYuLmVjN2M5OWNiZjE0MjE0OTlmZThmNTdmODMwODY2NGE5NTc5MDgyOTQgMTAwNjQ0Ci0tLSBh L1NvdXJjZS9XZWJLaXQvV2ViUHJvY2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgorKysg Yi9Tb3VyY2UvV2ViS2l0L1dlYlByb2Nlc3MvY29tLmFwcGxlLldlYlByb2Nlc3Muc2IuaW4KQEAg LTE2OTEsNiArMTY5MSw3IEBACiAgICAgICAgIChzeXNjYWxsLW51bWJlciBTWVNfZnN0YXQ2NF9l eHRlbmRlZCkgOzsgPHJkYXI6Ly9wcm9ibGVtLzYxMzEwMDE5PgogICAgICAgICAoc3lzY2FsbC1u dW1iZXIgU1lTX2dldGhvc3R1dWlkKQogICAgICAgICAoc3lzY2FsbC1udW1iZXIgU1lTX3NldGF0 dHJsaXN0KSA7OyByZGFyOi8vcHJvYmxlbS83NDE2Mjc3NworICAgICAgICAoc3lzY2FsbC1udW1i ZXIgU1lTX29wZW5fZHByb3RlY3RlZF9ucCkgOzsgPHJkYXI6Ly9wcm9ibGVtLzc0NDczODI0Pgog ICAgICkKIAogICAgIChpZiAoZXF1YWw/IChwYXJhbSAiQ1BVIikgImFybTY0IikK