Bug 205456

Summary: Remove syscall filtering from GPU Process sandbox
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit2Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, thorton, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch thorton: review+

Brent Fulgham
Reported 2019-12-19 09:06:58 PST
We don't have a fully built-out GPU Process yet. Let's not lock down the syscall filter set until we know which are actually needed by the process. The current set is just copied over from the WebContent process, and are not likely to be the correct set.
Attachments
Patch (15.74 KB, patch)
2019-12-19 09:12 PST, Brent Fulgham 		thorton: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2019-12-19 09:09:19 PST
<rdar://problem/58080834>
Brent Fulgham
Comment 2 2019-12-19 09:12:26 PST
Created attachment 386109 [details] Patch
Brent Fulgham
Comment 3 2019-12-19 09:59:40 PST
Committed r253761: <https://trac.webkit.org/changeset/253761>
Note You need to log in before you can comment on or make changes to this bug.