Bug 221611

Summary: [macOS] Deny mach-lookup to the service 'com.apple.trustd.agent'
Product: WebKit Reporter: Per Arne Vollan <pvollan>
Component: WebKit Misc.Assignee: Per Arne Vollan <pvollan>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

Description Per Arne Vollan 2021-02-09 08:58:51 PST 
Deny mach-lookup to the service 'com.apple.trustd.agent' in the WebContent process on macOS.
Comment 1 Per Arne Vollan 2021-02-09 08:59:09 PST 
<rdar://68935818>
Comment 2 Per Arne Vollan 2021-02-09 09:00:37 PST 
Created attachment 419729 [details]
Patch
Comment 3 Brent Fulgham 2021-02-09 09:57:07 PST 
Comment on attachment 419729 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=419729&action=review

r=me

> Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:-1090
> -    (global-name "com.apple.trustd.agent")

Do we need to allow this for older OS'es? Or is the dynamic extension used on all shipping platforms?
Comment 4 Per Arne Vollan 2021-02-09 09:59:56 PST 
(In reply to Brent Fulgham from comment #3)
> Comment on attachment 419729 [details]
> Patch
> 
> View in context:
> https://bugs.webkit.org/attachment.cgi?id=419729&action=review
> 
> r=me
> 
> > Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:-1090
> > -    (global-name "com.apple.trustd.agent")
> 
> Do we need to allow this for older OS'es? Or is the dynamic extension used
> on all shipping platforms?

Yes, the dynamic extension should be in place for older OS'es as well.

Thanks for reviewing!
Comment 5 EWS 2021-02-09 10:03:34 PST 
Committed r272585: <https://commits.webkit.org/r272585>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 419729 [details].