Bug 193828

Summary: [iOS] Deny mach lookups to services not used.
Product: WebKit Reporter: Per Arne Vollan <pvollan>
Component: WebKit Misc.Assignee: Per Arne Vollan <pvollan>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, commit-queue, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
none
Patch
bfulgham: review+
Patch none

Description Per Arne Vollan 2019-01-25 10:15:57 PST 
Start denying mach lookups to iOS services, which were previously allowed with reporting. Living-on has indicated that these services are not used.
Comment 1 Radar WebKit Bug Importer 2019-01-25 10:16:27 PST 
<rdar://problem/47553000>
Comment 2 Per Arne Vollan 2019-01-25 10:18:14 PST 
Created attachment 360120 [details]
Patch
Comment 3 Per Arne Vollan 2019-01-25 12:42:29 PST 
Created attachment 360147 [details]
Patch
Comment 4 Brent Fulgham 2019-01-25 12:50:17 PST 
Comment on attachment 360147 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=360147&action=review

> Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:454
> +;; FIXME: remove duplicates once the final list have been established.

Please add a bugzilla # so we remember to do this work.
Comment 5 Per Arne Vollan 2019-01-25 13:02:28 PST 
Created attachment 360149 [details]
Patch
Comment 6 Per Arne Vollan 2019-01-25 13:03:51 PST 
(In reply to Brent Fulgham from comment #4)
> Comment on attachment 360147 [details]
> Patch
> 
> View in context:
> https://bugs.webkit.org/attachment.cgi?id=360147&action=review
> 
> > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:454
> > +;; FIXME: remove duplicates once the final list have been established.
> 
> Please add a bugzilla # so we remember to do this work.

Done. Thanks for reviewing!
Comment 7 WebKit Commit Bot 2019-01-25 13:40:16 PST 
Comment on attachment 360149 [details]
Patch

Clearing flags on attachment: 360149

Committed r240500: <https://trac.webkit.org/changeset/240500>