Bug 216929

Summary: [macOS] Deny access to diagnosticd in the WebContent process
Product: WebKit Reporter: Per Arne Vollan <pvollan>
Component: WebKit Misc.Assignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, darin, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
none
Patch
none
Patch
darin: review+
Patch none

Description Per Arne Vollan 2020-09-24 07:32:18 PDT 
After the change-set <https://trac.webkit.org/changeset/267498> landed, an extension to diagnostics is issued when required, so the unconditional rule can be removed from the WebContent sandbox.
Comment 1 Per Arne Vollan 2020-09-24 07:37:39 PDT 
Created attachment 409574 [details]
Patch
Comment 2 Per Arne Vollan 2020-09-24 07:39:15 PDT 
Created attachment 409575 [details]
Patch
Comment 3 Per Arne Vollan 2020-09-24 10:30:16 PDT 
Created attachment 409594 [details]
Patch
Comment 4 Per Arne Vollan 2020-09-25 07:13:46 PDT 
Thanks for reviewing!
Comment 5 Per Arne Vollan 2020-09-25 07:14:22 PDT 
Created attachment 409690 [details]
Patch
Comment 6 Per Arne Vollan 2020-09-25 08:05:40 PDT 
This is being landed without the test, since the test results are different in internal OS variants.
Comment 7 EWS 2020-09-25 08:08:58 PDT 
Committed r267569: <https://trac.webkit.org/changeset/267569>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 409690 [details].
Comment 8 Radar WebKit Bug Importer 2020-09-25 08:09:15 PDT 
<rdar://problem/69571888>