230715 2021-09-23 13:30:48 -0700 Remove access to unused services in the Networking process 2021-09-23 15:19:37 -0700 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan pvollan achristensen bfulgham gavin.p mazander simon.fraser webkit-bug-importer oldest_to_newest 1796642 0 pvollan 2021-09-23 13:30:48 -0700 Telemetry is showing that some services allowed in the Networking process' sandbox are unused. These should be removed. 1796643 1 webkit-bug-importer 2021-09-23 13:31:33 -0700 <rdar://problem/83462947> 1796644 2 439087 pvollan 2021-09-23 13:36:30 -0700 Created attachment 439087 Patch 1796674 3 439087 bfulgham 2021-09-23 14:43:20 -0700 Comment on attachment 439087 Patch r=me 1796678 4 439087 pvollan 2021-09-23 14:49:06 -0700 Comment on attachment 439087 Patch Thanks for reviewing! 1796684 5 ews-feeder 2021-09-23 14:57:28 -0700 Committed r283012 (242077@main): <https://commits.webkit.org/242077@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 439087. 1796686 6 439087 simon.fraser 2021-09-23 14:59:44 -0700 Comment on attachment 439087 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=439087&action=review > Source/WebKit/ChangeLog:3 > + Remove access to unused services in the Networking access Bug title was right. Changelog was wrong. 1796692 7 pvollan 2021-09-23 15:19:37 -0700 (In reply to Simon Fraser (smfr) from comment #6) > Comment on attachment 439087 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=439087&action=review > > > Source/WebKit/ChangeLog:3 > > + Remove access to unused services in the Networking access > > Bug title was right. Changelog was wrong. Ah, thanks, good catch :) 439087 2021-09-23 13:36:30 -0700 2021-09-23 14:57:30 -0700 Patch bug-230715-20210923133628.patch text/plain 2334 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyODMwMDQpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBACisyMDIxLTA5LTIzICBQZXIgQXJuZSBW b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBSZW1vdmUgYWNjZXNzIHRvIHVu dXNlZCBzZXJ2aWNlcyBpbiB0aGUgTmV0d29ya2luZyBhY2Nlc3MKKyAgICAgICAgaHR0cHM6Ly9i dWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIzMDcxNQorICAgICAgICA8cmRhcjovL3By b2JsZW0vODM0NjI5NDc+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisK KyAgICAgICAgVGVsZW1ldHJ5IGlzIHNob3dpbmcgdGhhdCBzb21lIHNlcnZpY2VzIGFsbG93ZWQg aW4gdGhlIE5ldHdvcmtpbmcgcHJvY2Vzcycgc2FuZGJveCBhcmUgdW51c2VkLiBUaGVzZSBzaG91 bGQgYmUgcmVtb3ZlZC4KKworICAgICAgICAqIE5ldHdvcmtQcm9jZXNzL2NvY29hL05ldHdvcmtT ZXNzaW9uQ29jb2EubW06CisgICAgICAgICgtW1dLTmV0d29ya1Nlc3Npb25EZWxlZ2F0ZSBVUkxT ZXNzaW9uOnRhc2s6ZGlkUmVjZWl2ZUNoYWxsZW5nZTpjb21wbGV0aW9uSGFuZGxlcjpdKToKKyAg ICAgICAgKiBOZXR3b3JrUHJvY2Vzcy9tYWMvY29tLmFwcGxlLldlYktpdC5OZXR3b3JrUHJvY2Vz cy5zYi5pbjoKKwogMjAyMS0wOS0yMyAgVGltIEhvcnRvbiAgPHRpbW90aHlfaG9ydG9uQGFwcGxl LmNvbT4KIAogICAgICAgICBNb3ZlIG1vcmUgbGlua2VkLW9uLW9yLWFmdGVyIGNoZWNrcyB0byBX ZWJDb3JlOjpsaW5rZWRPbk9yQWZ0ZXIoKQpJbmRleDogU291cmNlL1dlYktpdC9OZXR3b3JrUHJv Y2Vzcy9tYWMvY29tLmFwcGxlLldlYktpdC5OZXR3b3JrUHJvY2Vzcy5zYi5pbgo9PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 Ci0tLSBTb3VyY2UvV2ViS2l0L05ldHdvcmtQcm9jZXNzL21hYy9jb20uYXBwbGUuV2ViS2l0Lk5l dHdvcmtQcm9jZXNzLnNiLmluCShyZXZpc2lvbiAyODI5NjUpCisrKyBTb3VyY2UvV2ViS2l0L05l dHdvcmtQcm9jZXNzL21hYy9jb20uYXBwbGUuV2ViS2l0Lk5ldHdvcmtQcm9jZXNzLnNiLmluCSh3 b3JraW5nIGNvcHkpCkBAIC0xMTMsMjEgKzExMyw4IEBACiAgICAgICAgKGlwYy1wb3NpeC1uYW1l LXByZWZpeCAiYXBwbGUuY2ZwcmVmcy4iKSkKIAogKGFsbG93IG1hY2gtbG9va3VwICh3aXRoIHJl cG9ydCkgKHdpdGggdGVsZW1ldHJ5KQotICAgICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLmFu YWx5dGljc2QubWVzc2FnZXRyYWNlciIpCi0gICAgICAgKGdsb2JhbC1uYW1lICJjb20uYXBwbGUu YXBwc2xlZXAiKQotICAgICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLmJzZC5kaXJoZWxwZXIi KQotICAgICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLmNmcHJlZnNkLmFnZW50IikKLSAgICAg ICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5jZnByZWZzZC5kYWVtb24iKQotICAgICAgIChnbG9i YWwtbmFtZSAiY29tLmFwcGxlLmVzcGQiKQotICAgICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxl LnNlY2luaXRkIikKLSAgICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5zeXN0ZW0uRGlyZWN0 b3J5U2VydmljZS5saWJpbmZvX3YxIikKLSAgICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5z eXN0ZW0ubG9nZ2VyIikKICAgICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5zeXN0ZW0ub3Bl bmRpcmVjdG9yeWQubGliaW5mbyIpCi0gICAgICAgKGdsb2JhbC1uYW1lICJjb20uYXBwbGUuc3lz dGVtLm9wZW5kaXJlY3RvcnlkLm1lbWJlcnNoaXAiKQotICAgICAgIChnbG9iYWwtbmFtZSAiY29t LmFwcGxlLnRydXN0ZCIpCi0gICAgICAgKGdsb2JhbC1uYW1lICJjb20uYXBwbGUudHJ1c3RkLmFn ZW50IikKLSAgICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS54cGMuYWN0aXZpdHkudW5tYW5h Z2VkIikKLSAgICAgICAobG9jYWwtbmFtZSAiY29tLmFwcGxlLmNmcHJlZnNkLmFnZW50IikpCisg ICAgICAgKGdsb2JhbC1uYW1lICJjb20uYXBwbGUudHJ1c3RkLmFnZW50IikpCiAKICh3aXRoLWZp bHRlciAoc3lzdGVtLWF0dHJpYnV0ZSBhcHBsZS1pbnRlcm5hbCkKICAgICAoYWxsb3cgbWFjaC1s b29rdXAgKGdsb2JhbC1uYW1lICJjb20uYXBwbGUuaW50ZXJuYWwub2JqY190cmFjZSIpKSkK