Bug 226944

Summary: [iOS] Tighten the WebAuthn Sandbox
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit Misc.Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: pvollan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

Description Brent Fulgham 2021-06-11 15:32:33 PDT 
The Sandbox we use for the WebAuthn process was based in the WebContent process sandbox and contains more things than we need.

This patch cleans the sandbox up, and removes a number of things that are not used by the process.

We should make similar changes to the macOS version once we complete the UI implementation.
Comment 1 Brent Fulgham 2021-06-11 15:32:56 PDT 
<rdar://problem/74721792>
Comment 2 Brent Fulgham 2021-06-11 17:03:48 PDT 
Created attachment 431244 [details]
Patch
Comment 3 Per Arne Vollan 2021-06-14 02:01:51 PDT 
Comment on attachment 431244 [details]
Patch

R=me.
Comment 4 EWS 2021-06-14 10:19:45 PDT 
Committed r278831 (238782@main): <https://commits.webkit.org/238782@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 431244 [details].