Bug 209938

Summary: Remove unneeded sandbox access to some file paths
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit Misc.Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, pvollan, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=221946
Bug Depends on:    
Bug Blocks: 211408    
Attachments:
Description Flags
Patch none

Brent Fulgham
Reported 2020-04-02 16:28:13 PDT
The WebContent process sandbox has historically had access to variations of the /etc/passwd file. This access is not needed in the WebContent process, so we should remove it.
Attachments
Patch (2.51 KB, patch)
2020-04-02 16:30 PDT, Brent Fulgham 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Brent Fulgham
Comment 1 2020-04-02 16:28:36 PDT
<rdar://problem/59529620>
Brent Fulgham
Comment 2 2020-04-02 16:30:40 PDT
Created attachment 395320 [details] Patch
Per Arne Vollan
Comment 3 2020-04-03 06:47:58 PDT
Comment on attachment 395320 [details] Patch R=me.
EWS
Comment 4 2020-04-03 10:43:26 PDT
Committed r259470: <https://trac.webkit.org/changeset/259470> All reviewed patches have been landed. Closing bug and clearing flags on attachment 395320 [details].
Brent Fulgham
Comment 5 2020-04-03 15:17:19 PDT
Follow-up build fix: Committed r259506: <https://trac.webkit.org/changeset/259506>
Brent Fulgham
Comment 6 2020-04-12 13:24:28 PDT
Per Arne fixed iOS here: Committed r259590: <https://trac.webkit.org/changeset/259590>
Note You need to log in before you can comment on or make changes to this bug.