Bug 179689

Summary: Remove access to "com.apple.pbs.fetch_services" from WebContent sandbox
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit2Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: achristensen, bfulgham, dino, ggaren, pvollan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch pvollan: review+

Description Brent Fulgham 2017-11-14 13:17:03 PST 
We shouldn't need access to fetch_services inside the WebContent sandbox.
Comment 1 Brent Fulgham 2017-11-14 13:17:16 PST 
<rdar://problem/35369172>
Comment 2 Brent Fulgham 2017-11-14 13:23:41 PST 
Created attachment 326915 [details]
Patch
Comment 3 Per Arne Vollan 2017-11-15 08:56:42 PST 
Comment on attachment 326915 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=326915&action=review

R=me.

> Source/WebKit/ChangeLog:10
> +        API exposed to the system. These interactions (if needed) shoud be happening in the UIProcess,

'shoud' -> 'should'
Comment 4 Brent Fulgham 2017-11-15 08:58:18 PST 
Comment on attachment 326915 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=326915&action=review

>> Source/WebKit/ChangeLog:10
>> +        API exposed to the system. These interactions (if needed) shoud be happening in the UIProcess,
> 
> 'shoud' -> 'should'

Doh! Thank you for catching that.
Comment 5 Brent Fulgham 2017-11-15 08:59:54 PST 
Committed r224878: <https://trac.webkit.org/changeset/224878>