232209 2021-10-23 19:03:13 -0700 [iOS][GPUP] Remove sandbox access to mach services 2021-11-09 16:52:22 -0800 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan pvollan bfulgham darin gavin.p mazander webkit-bug-importer oldest_to_newest 1808152 0 pvollan 2021-10-23 19:03:13 -0700 Remove access to mach services in the GPU process' sandbox that are unused according to telemetry. 1808153 1 webkit-bug-importer 2021-10-23 19:03:44 -0700 <rdar://problem/84584739> 1808154 2 442288 pvollan 2021-10-23 19:05:13 -0700 Created attachment 442288 Patch 1813405 3 442288 pvollan 2021-11-09 16:47:08 -0800 Comment on attachment 442288 Patch Thanks for reviewing! 1813408 4 ews-feeder 2021-11-09 16:52:20 -0800 Committed r285545 (244059@main): <https://commits.webkit.org/244059@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 442288. 442288 2021-10-23 19:05:13 -0700 2021-11-09 16:52:21 -0800 Patch bug-232209-20211023190510.patch text/plain 3122 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyODQ3NTEpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDIxLTEwLTIzICBQZXIgQXJuZSAg PHB2b2xsYW5AYXBwbGUuY29tPgorCisgICAgICAgIFtpT1NdW0dQVVBdIFJlbW92ZSBzYW5kYm94 IGFjY2VzcyB0byBtYWNoIHNlcnZpY2VzCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3Jn L3Nob3dfYnVnLmNnaT9pZD0yMzIyMDkKKyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzg0NTg0NzM5 PgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFJlbW92 ZSBhY2Nlc3MgdG8gbWFjaCBzZXJ2aWNlcyBpbiB0aGUgR1BVIHByb2Nlc3MnIHNhbmRib3ggdGhh dCBhcmUgdW51c2VkIGFjY29yZGluZyB0byB0ZWxlbWV0cnkuCisKKyAgICAgICAgKiBSZXNvdXJj ZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LkdQVS5zYjoKKwogMjAyMS0x MC0yMyAgRGVhbiBKYWNrc29uICA8ZGlub0BhcHBsZS5jb20+CiAKICAgICAgICAgRGlzYWJsZSBQ aVAgd2hlbiBIQVZFKFVJS0lUX1dFQktJVF9JTlRFUk5BTFMpCkluZGV4OiBTb3VyY2UvV2ViS2l0 L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuR1BVLnNiCj09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3Mv Y29tLmFwcGxlLldlYktpdC5HUFUuc2IJKHJldmlzaW9uIDI4NDY0OCkKKysrIFNvdXJjZS9XZWJL aXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5HUFUuc2IJ KHdvcmtpbmcgY29weSkKQEAgLTUxOSwxMiArNTE5LDkgQEAKICAgICAgICAgKGV4dGVuc2lvbi1j bGFzcyAiY29tLmFwcGxlLmFwcC1zYW5kYm94LnJlYWQtd3JpdGUiICJjb20uYXBwbGUuYXBwLXNh bmRib3gucmVhZCIpCiAgICAgICAgIChleHRlbnNpb24gImNvbS5hcHBsZS5maWxlcHJvdmlkZXIu cmVhZC13cml0ZSIpKSkKIAotKGFsbG93IG1hY2gtbG9va3VwICh3aXRoIHRlbGVtZXRyeSkKKyhh bGxvdyBtYWNoLWxvb2t1cAogICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLmxvZ2QiKQotICAg IChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLmxvZ2QuZXZlbnRzIikKLSAgICAoZ2xvYmFsLW5hbWUg ImNvbS5hcHBsZS5kaXN0cmlidXRlZF9ub3RpZmljYXRpb25zQDF2MyIpCi0gICAgKGdsb2JhbC1u YW1lICJjb20uYXBwbGUuYWdncmVnYXRlZCIpCi0pCisgICAgKGdsb2JhbC1uYW1lICJjb20uYXBw bGUubG9nZC5ldmVudHMiKSkKIAogKGFsbG93IG1hY2gtbG9va3VwICh3aXRoIHRlbGVtZXRyeSkK ICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS50Y2NkIikpCkBAIC01NjIsOSArNTU5LDYgQEAK ICAgICAoYWxsb3cgbnZyYW0tZ2V0ICh3aXRoIHRlbGVtZXRyeSkgKG52cmFtLXZhcmlhYmxlICJl bXUiKSkgOzsgPHJkYXI6Ly9wcm9ibGVtLzc4MzYzMDQwPgogKQogCi0oYWxsb3cgbWFjaC1sb29r dXAgKHdpdGggdGVsZW1ldHJ5KQotICAgICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLnN5c3Rl bS5sb2dnZXIiKSkKLQogKGFsbG93IGZpbGUtcmVhZC1tZXRhZGF0YSAod2l0aCB0ZWxlbWV0cnkp CiAgICAgICAgKGxpdGVyYWwgIi9wcml2YXRlL3Zhci9ydW4vc3lzbG9nIikpCiAKQEAgLTYyNywx MCArNjIxLDYgQEAKIAogKHVybC10cmFuc2xhdGlvbikKIAotOzsgVGV4dElucHV0IGZyYW1ld29y awotKGFsbG93IG1hY2gtbG9va3VwICh3aXRoIHRlbGVtZXRyeSkKLSAgICAoZ2xvYmFsLW5hbWUg ImNvbS5hcHBsZS5UZXh0SW5wdXQiKSkKLQogKG1vYmlsZS1wcmVmZXJlbmNlcy1yZWFkICJjb20u YXBwbGUuZGEiKQogCiAoc3BlZWNoLXN5bnRoZXNpcy1hbmQtdm9pY2VvdmVyKQpAQCAtODkzLDE3 ICs4ODMsNiBAQAogICAgIChsaXRlcmFsICIvdXNyL2xvY2FsL2xpYi9sb2ciKSA7IDxyZGFyOi8v cHJvYmxlbS8zNjYyOTQ5NT4KICkKIAotKGFsbG93IG1hY2gtbG9va3VwICh3aXRoIHRlbGVtZXRy eSkKLSAgICAocmVxdWlyZS1hbGwKLSAgICAgICAgKGV4dGVuc2lvbiAiY29tLmFwcGxlLndlYmtp dC5leHRlbnNpb24ubWFjaCIpCi0gICAgICAgIChnbG9iYWwtbmFtZQotICAgICAgICAgICAgImNv bS5hcHBsZS5Qb3dlck1hbmFnZW1lbnQuY29udHJvbCIKLSAgICAgICAgICAgICJjb20uYXBwbGUu ZnJvbnRib2FyZC5zeXN0ZW1hcHBzZXJ2aWNlcyIKLSAgICAgICAgICAgICJjb20uYXBwbGUuaWNv bnNlcnZpY2VzIgotICAgICAgICApCi0gICAgKQotKQotCiAoYWxsb3cgaW9raXQtb3BlbiAod2l0 aCB0ZWxlbWV0cnkpCiAgICAgKHJlcXVpcmUtYWxsCiAgICAgICAgIChleHRlbnNpb24gImNvbS5h cHBsZS53ZWJraXQuZXh0ZW5zaW9uLmlva2l0IikKQEAgLTkzOSwxNiArOTE4LDYgQEAKICAgICAo Z2xvYmFsLW5hbWUgImNvbS5hcHBsZS5zeXN0ZW1zdGF0dXMuYWN0aXZpdHlhdHRyaWJ1dGlvbiIp CiApCiAKLShhbGxvdyBtYWNoLWxvb2t1cCAod2l0aCB0ZWxlbWV0cnkpCi0gICAgKHJlcXVpcmUt YWxsCi0gICAgICAgIChleHRlbnNpb24gImNvbS5hcHBsZS53ZWJraXQuZXh0ZW5zaW9uLm1hY2gi KQotICAgICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5pcGhvbmUuYXhzZXJ2ZXItc3lzdGVt d2lkZSIgImNvbS5hcHBsZS50Y2NkIikpKQotCi0oYWxsb3cgbWFjaC1sb29rdXAgKHdpdGggdGVs ZW1ldHJ5KQotICAgIChyZXF1aXJlLWFsbAotICAgICAgICAoZXh0ZW5zaW9uICJjb20uYXBwbGUu d2Via2l0LmV4dGVuc2lvbi5tYWNoIikKLSAgICAgICAgKHhwYy1zZXJ2aWNlLW5hbWUtcHJlZml4 ICJjb20uYXBwbGUuQUdYQ29tcGlsZXJTZXJ2aWNlIikpKQotCiAobWVkaWEtY2FwdHVyZS1zdXBw b3J0KQogCiAoYWxsb3cgbWFjaC1sb29rdXAgKHdpdGggdGVsZW1ldHJ5KQo=