223088 2021-03-11 14:02:26 -0800 [iOS, macOS] Re-allow WebContent sandbox permissions for specific /etc files 2021-03-11 16:43:33 -0800 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 bfulgham bfulgham bfulgham pvollan webkit-bug-importer oldest_to_newest 1738607 0 bfulgham 2021-03-11 14:02:26 -0800 After auditing the code paths and content in /etc/passwd, we have determined there is no security benefit to blocking access and some performance impact to blocking. To avoid a performance impact, let's put it back. 1738608 1 webkit-bug-importer 2021-03-11 14:02:44 -0800 <rdar://problem/75332107> 1738624 2 422968 bfulgham 2021-03-11 14:19:38 -0800 Created attachment 422968 Patch 1738634 3 422968 pvollan 2021-03-11 14:40:53 -0800 Comment on attachment 422968 Patch R=me. 1738707 4 ews-feeder 2021-03-11 16:43:32 -0800 Committed r274311: <https://commits.webkit.org/r274311> All reviewed patches have been landed. Closing bug and clearing flags on attachment 422968. 422968 2021-03-11 14:19:38 -0800 2021-03-11 16:43:32 -0800 Patch bug-223088-20210311141938.patch text/plain 2244 bfulgham U3VidmVyc2lvbiBSZXZpc2lvbjogMjc0Mjk5CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IGQ4NDk1N2YxNGM3NGVkNTcz OGI1Y2YzNDJkN2EzZjJiMzM1MmUzNjYuLjZjZTA5MmRjYTY5MTRkNWM2M2VhYTZkMjU1ODVhOTg0 ZjU1NTZlMTcgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTQgQEAKKzIwMjEtMDMtMTEgIEJyZW50IEZ1 bGdoYW0gIDxiZnVsZ2hhbUBhcHBsZS5jb20+CisKKyAgICAgICAgW2lPUywgbWFjT1NdIFJlLWFs bG93IFdlYkNvbnRlbnQgc2FuZGJveCBwZXJtaXNzaW9ucyBmb3Igc3BlY2lmaWMgL2V0YyBmaWxl cyAKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIyMzA4 OAorICAgICAgICA8cmRhcjovL3Byb2JsZW0vNzUzMzIxMDc+CisKKyAgICAgICAgUmV2aWV3ZWQg YnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgKiBSZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVz L2lvcy9jb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQuc2I6CisgICAgICAgICogV2ViUHJvY2Vz cy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbjoKKwogMjAyMS0wMy0xMSAgQWxleCBDaHJpc3Rl bnNlbiAgPGFjaHJpc3RlbnNlbkB3ZWJraXQub3JnPgogCiAgICAgICAgIFJldmVydCByMjYwMzAy CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9z L2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYiBiL1NvdXJjZS9XZWJLaXQvUmVzb3VyY2Vz L1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNiCmluZGV4 IGM2ZmJiMDNhNWYyMGI2MTBhMzZmYjYzNWQ4M2NiODNiNjEzOTk0MTUuLjc5ZGQ5NDFmZjYyZTc4 YzZjMmJkMjI5NzM0NDZlODk3NzYwNTlhYzEgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvUmVz b3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNi CisrKyBiL1NvdXJjZS9XZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFw cGxlLldlYktpdC5XZWJDb250ZW50LnNiCkBAIC0zNjIsNiArMzYyLDcgQEAKICAgKGxpdGVyYWwg Ii9wcml2YXRlL2V0Yy9mc3RhYiIKICAgICAgICAgICAgIi9wcml2YXRlL2V0Yy9ob3N0cyIKICAg ICAgICAgICAgIi9wcml2YXRlL2V0Yy9ncm91cCIKKyAgICAgICAgICAgIi9wcml2YXRlL2V0Yy9w YXNzd2QiCiAgICAgICAgICAgICIvcHJpdmF0ZS9ldGMvcHJvdG9jb2xzIgogICAgICAgICAgICAi L3ByaXZhdGUvZXRjL3NlcnZpY2VzIikpCiAKQEAgLTU4MSw5ICs1ODIsNiBAQAogICAgIHJlcXVp cmVkLWV0Yy1maWxlcwogICAgIChsaXRlcmFsICIvIikpCiAKLShkZW55IGZpbGUtcmVhZCogKHdp dGggbm8tcmVwb3J0KQotICAgICAgKGxpdGVyYWwgIi9wcml2YXRlL2V0Yy9wYXNzd2QiKSkKLQog KGFsbG93IGZpbGUtcmVhZCoKICAgICAgICAoc3VicGF0aCAiL3ByaXZhdGUvdmFyL01vYmlsZUFz c2V0L1ByZWluc3RhbGxlZEFzc2V0c1YyL0luc3RhbGxXaXRoT3MiKSkKIApkaWZmIC0tZ2l0IGEv U291cmNlL1dlYktpdC9XZWJQcm9jZXNzL2NvbS5hcHBsZS5XZWJQcm9jZXNzLnNiLmluIGIvU291 cmNlL1dlYktpdC9XZWJQcm9jZXNzL2NvbS5hcHBsZS5XZWJQcm9jZXNzLnNiLmluCmluZGV4IDRj ODIxMmIzN2Y2NDYxZTU0NTgxNjI4OWE0MzVhMjBhYTgwZGU2NTAuLjMzMDkyZjE0YzQxZDQwYjEx NDMxMTMyNmQ4NjJkNDZlMmVjNmI1NGIgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvV2ViUHJv Y2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgorKysgYi9Tb3VyY2UvV2ViS2l0L1dlYlBy b2Nlc3MvY29tLmFwcGxlLldlYlByb2Nlc3Muc2IuaW4KQEAgLTgwLDEwICs4MCw4IEBACiAgICAg KGxpdGVyYWwgIi9kZXYvYXV0b2ZzX25vd2FpdCIpCiAgICAgKGxpdGVyYWwgIi9kZXYvcmFuZG9t IikKICAgICAobGl0ZXJhbCAiL2Rldi91cmFuZG9tIikKLSNpZiBfX01BQ19PU19YX1ZFUlNJT05f TUlOX1JFUVVJUkVEIDwgMTIwMDAwCiAgICAgKGxpdGVyYWwgIi9wcml2YXRlL2V0Yy9tYXN0ZXIu cGFzc3dkIikKICAgICAobGl0ZXJhbCAiL3ByaXZhdGUvZXRjL3Bhc3N3ZCIpCi0jZW5kaWYKICkK IAogKGFsbG93IGZpbGUtcmVhZCoK