223641 2021-03-23 09:26:10 -0700 [iOS] Read access to passwd is required 2021-04-27 10:07:47 -0700 1 1 1 Unclassified WebKit WebKit Website WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan pvollan bfulgham jond webkit-bug-importer oldest_to_newest 1742840 0 pvollan 2021-03-23 09:26:10 -0700 The WebContent sandbox on iOS should allow reading the passwd file. 1742841 1 pvollan 2021-03-23 09:26:33 -0700 <rdar://75616105> 1742844 2 424026 pvollan 2021-03-23 09:28:09 -0700 Created attachment 424026 Patch 1742846 3 pvollan 2021-03-23 09:30:18 -0700 This patch is not intended for ToT. 1742851 4 424026 bfulgham 2021-03-23 09:33:32 -0700 Comment on attachment 424026 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=424026&action=review r=me > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:-586 > - (literal "/private/etc/passwd")) Oh, no! I missed that one. 1742852 5 424028 pvollan 2021-03-23 09:37:37 -0700 Created attachment 424028 Patch 1742855 6 pvollan 2021-03-23 09:42:19 -0700 (In reply to Brent Fulgham from comment #4) > Comment on attachment 424026 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=424026&action=review > > r=me > > > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:-586 > > - (literal "/private/etc/passwd")) > > Oh, no! I missed that one. I believe this was incorrectly added by myself in https://trac.webkit.org/changeset/274231/webkit. Thanks for reviewing! 424026 2021-03-23 09:28:09 -0700 2021-03-23 09:33:32 -0700 Patch bug-223641-20210323092808.patch text/plain 1277 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyNzQ4NzUpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDIxLTAzLTIzICBQZXIgQXJuZSBW b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbaU9TXSBSZWFkIGFjY2VzcyB0 byBwYXNzd2QgaXMgcmVxdWlyZWQKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hv d19idWcuY2dpP2lkPTIyMzY0MQorICAgICAgICA8cmRhcjovLzc1NjE2MTA1PgorCisgICAgICAg IFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFRoZSBXZWJDb250ZW50IHNh bmRib3ggb24gaU9TIHNob3VsZCBhbGxvdyByZWFkaW5nIHRoZSBwYXNzd2QgZmlsZS4KKworICAg ICAgICAqIFJlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2Vi Q29udGVudC5zYjoKKwogMjAyMS0wMy0yMiAgUnVzc2VsbCBFcHN0ZWluICA8cmVwc3RlaW5AYXBw bGUuY29tPgogCiAgICAgICAgIENoZXJyeS1waWNrIHIyNzQ3OTAuIHJkYXI6Ly9wcm9ibGVtLzc1 NzEyNjM3CkluZGV4OiBTb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9z L2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYgo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi S2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29u dGVudC5zYgkocmV2aXNpb24gMjc0ODcxKQorKysgU291cmNlL1dlYktpdC9SZXNvdXJjZXMvU2Fu ZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQuc2IJKHdvcmtpbmcg Y29weSkKQEAgLTU4Miw5ICs1ODIsNiBAQAogICAgIHJlcXVpcmVkLWV0Yy1maWxlcwogICAgIChs aXRlcmFsICIvIikpCiAKLShkZW55IGZpbGUtcmVhZCogKHdpdGggbm8tcmVwb3J0KQotICAgICAg KGxpdGVyYWwgIi9wcml2YXRlL2V0Yy9wYXNzd2QiKSkKLQogKGFsbG93IGZpbGUtcmVhZCoKICAg ICAgICAoc3VicGF0aCAiL3ByaXZhdGUvdmFyL01vYmlsZUFzc2V0L1ByZWluc3RhbGxlZEFzc2V0 c1YyL0luc3RhbGxXaXRoT3MiKSkKIAo= 424028 2021-03-23 09:37:37 -0700 2021-03-23 09:37:37 -0700 Patch bug-223641-20210323093736.patch text/plain 1276 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyNzQ4NzUpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDIxLTAzLTIzICBQZXIgQXJuZSBW b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbaU9TXSBSZWFkIGFjY2VzcyB0 byBwYXNzd2QgaXMgcmVxdWlyZWQKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hv d19idWcuY2dpP2lkPTIyMzY0MQorICAgICAgICA8cmRhcjovLzc1NjE2MTA1PgorCisgICAgICAg IFJldmlld2VkIGJ5IEJyZW50IEZ1bGdoYW0uCisKKyAgICAgICAgVGhlIFdlYkNvbnRlbnQgc2Fu ZGJveCBvbiBpT1Mgc2hvdWxkIGFsbG93IHJlYWRpbmcgdGhlIHBhc3N3ZCBmaWxlLgorCisgICAg ICAgICogUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5XZWJD b250ZW50LnNiOgorCiAyMDIxLTAzLTIyICBSdXNzZWxsIEVwc3RlaW4gIDxyZXBzdGVpbkBhcHBs ZS5jb20+CiAKICAgICAgICAgQ2hlcnJ5LXBpY2sgcjI3NDc5MC4gcmRhcjovL3Byb2JsZW0vNzU3 MTI2MzcKSW5kZXg6IFNvdXJjZS9XZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3Mv Y29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNiCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250 ZW50LnNiCShyZXZpc2lvbiAyNzQ4NzEpCisrKyBTb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5k Ym94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYgkod29ya2luZyBj b3B5KQpAQCAtNTgyLDkgKzU4Miw2IEBACiAgICAgcmVxdWlyZWQtZXRjLWZpbGVzCiAgICAgKGxp dGVyYWwgIi8iKSkKIAotKGRlbnkgZmlsZS1yZWFkKiAod2l0aCBuby1yZXBvcnQpCi0gICAgICAo bGl0ZXJhbCAiL3ByaXZhdGUvZXRjL3Bhc3N3ZCIpKQotCiAoYWxsb3cgZmlsZS1yZWFkKgogICAg ICAgIChzdWJwYXRoICIvcHJpdmF0ZS92YXIvTW9iaWxlQXNzZXQvUHJlaW5zdGFsbGVkQXNzZXRz VjIvSW5zdGFsbFdpdGhPcyIpKQogCg==