Bug 223641

Summary: [iOS] Read access to passwd is required
Product: WebKit Reporter: Per Arne Vollan <pvollan>
Component: WebKit WebsiteAssignee: Per Arne Vollan <pvollan>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, jond, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
bfulgham: review+
Patch none

Per Arne Vollan
Reported 2021-03-23 09:26:10 PDT
The WebContent sandbox on iOS should allow reading the passwd file.
Attachments
Patch (1.25 KB, patch)
2021-03-23 09:28 PDT, Per Arne Vollan 		bfulgham: review+
DetailsFormatted DiffDiff
Patch (1.25 KB, patch)
2021-03-23 09:37 PDT, Per Arne Vollan 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Per Arne Vollan
Comment 1 2021-03-23 09:26:33 PDT
<rdar://75616105>
Per Arne Vollan
Comment 2 2021-03-23 09:28:09 PDT
Created attachment 424026 [details] Patch
Per Arne Vollan
Comment 3 2021-03-23 09:30:18 PDT
This patch is not intended for ToT.
Brent Fulgham
Comment 4 2021-03-23 09:33:32 PDT
Comment on attachment 424026 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=424026&action=review r=me > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:-586 > - (literal "/private/etc/passwd")) Oh, no! I missed that one.
Per Arne Vollan
Comment 5 2021-03-23 09:37:37 PDT
Created attachment 424028 [details] Patch
Per Arne Vollan
Comment 6 2021-03-23 09:42:19 PDT
(In reply to Brent Fulgham from comment #4) > Comment on attachment 424026 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=424026&action=review > > r=me > > > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:-586 > > - (literal "/private/etc/passwd")) > > Oh, no! I missed that one. I believe this was incorrectly added by myself in https://trac.webkit.org/changeset/274231/webkit. Thanks for reviewing!
Note You need to log in before you can comment on or make changes to this bug.