Bug 206098

Summary: [iOS] Remove access to 'awd' directories
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit2Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, commit-queue, pvollan, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on: 206095    
Bug Blocks:    
Attachments:
Description Flags
Patch
none
Patch none

Brent Fulgham
Reported 2020-01-10 14:44:22 PST
Confirm that we no longer touch these directories, then remove them from the sandbox.
Attachments
Patch (2.12 KB, patch)
2020-01-23 12:14 PST, Brent Fulgham 		no flags
DetailsFormatted DiffDiff
Patch (3.48 KB, patch)
2020-01-23 12:16 PST, Brent Fulgham 		no flags
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2020-01-10 14:44:44 PST
<rdar://problem/58491816>
Per Arne Vollan
Comment 2 2020-01-10 15:11:09 PST
Are we also ready to block mach lookup access to awdd?
Brent Fulgham
Comment 3 2020-01-10 15:12:51 PST
(In reply to Per Arne Vollan from comment #2) > Are we also ready to block mach lookup access to awdd? That's in Bug 206095. Once we block (in that bug), I suspect we can remove this access. But I didn't want to do it in one patch, because I don't think we've adequately tested the lack of these directory access rules.
Brent Fulgham
Comment 4 2020-01-23 12:14:17 PST
Created attachment 388575 [details] Patch
Brent Fulgham
Comment 5 2020-01-23 12:16:48 PST
Created attachment 388576 [details] Patch
Per Arne Vollan
Comment 6 2020-01-23 12:50:52 PST
Comment on attachment 388576 [details] Patch R=me.
WebKit Commit Bot
Comment 7 2020-01-23 13:15:00 PST
Comment on attachment 388576 [details] Patch Clearing flags on attachment: 388576 Committed r254999: <https://trac.webkit.org/changeset/254999>
WebKit Commit Bot
Comment 8 2020-01-23 13:15:01 PST
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.