Bug 209938

Summary: Remove unneeded sandbox access to some file paths
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit Misc.Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, pvollan, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=221946
Bug Depends on:    
Bug Blocks: 211408    
Attachments:
Description Flags
Patch none

Description Brent Fulgham 2020-04-02 16:28:13 PDT 
The WebContent process sandbox has historically had access to variations of the /etc/passwd file. This access is not needed in the WebContent process, so we should remove it.
Comment 1 Brent Fulgham 2020-04-02 16:28:36 PDT 
<rdar://problem/59529620>
Comment 2 Brent Fulgham 2020-04-02 16:30:40 PDT 
Created attachment 395320 [details]
Patch
Comment 3 Per Arne Vollan 2020-04-03 06:47:58 PDT 
Comment on attachment 395320 [details]
Patch

R=me.
Comment 4 EWS 2020-04-03 10:43:26 PDT 
Committed r259470: <https://trac.webkit.org/changeset/259470>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 395320 [details].
Comment 5 Brent Fulgham 2020-04-03 15:17:19 PDT 
Follow-up build fix:

Committed r259506: <https://trac.webkit.org/changeset/259506>
Comment 6 Brent Fulgham 2020-04-12 13:24:28 PDT 
Per Arne fixed iOS here:

Committed r259590: <https://trac.webkit.org/changeset/259590>