Bug 222335

Summary: [macOS] Allow additional syscall support in the sandbox
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit2Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: pvollan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

Brent Fulgham
Reported 2021-02-23 15:50:44 PST
We are seeing sandbox errors when some dependent frameworks created caches in the WebContent process. Some of these code paths are relevant in the Network Process, as well. We should allow this syscall access now that we understand its use, and have evaluated the risk of the syscall.
Attachments
Patch (1.44 KB, patch)
2021-02-23 15:53 PST, Brent Fulgham 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Brent Fulgham
Comment 1 2021-02-23 15:51:32 PST
<rdar://problem/74473824>
Brent Fulgham
Comment 2 2021-02-23 15:53:10 PST
Created attachment 421361 [details] Patch
Per Arne Vollan
Comment 3 2021-02-23 15:54:25 PST
Comment on attachment 421361 [details] Patch R=me.
EWS
Comment 4 2021-02-23 17:02:49 PST
Committed r273359: <https://commits.webkit.org/r273359> All reviewed patches have been landed. Closing bug and clearing flags on attachment 421361 [details].
Note You need to log in before you can comment on or make changes to this bug.