Bug 231046

Summary: [iOS] Add message filter in the WebContent process' sandbox
Product: WebKit Reporter: Per Arne Vollan <pvollan>
Component: WebKit Misc.Assignee: Per Arne Vollan <pvollan>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, gavin.p, mazander, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
none
Patch none

Description Per Arne Vollan 2021-09-30 16:30:09 PDT
Add IOKit message filter in the WebContent process' sandbox on iOS.
Comment 1 Radar WebKit Bug Importer 2021-09-30 16:32:31 PDT
<rdar://problem/83743661>
Comment 2 Per Arne Vollan 2021-09-30 16:35:13 PDT
Created attachment 439793 [details]
Patch
Comment 3 Brent Fulgham 2021-10-01 09:27:59 PDT
Comment on attachment 439793 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=439793&action=review

r=me

> Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:106
> +                (allow (with telemetry) iokit-external-method

Do we need telemetry on those two method numbers? Or should the telemetry be for any remaining denials?
Comment 4 Per Arne Vollan 2021-10-01 14:17:35 PDT
(In reply to Brent Fulgham from comment #3)
> Comment on attachment 439793 [details]
> Patch
> 
> View in context:
> https://bugs.webkit.org/attachment.cgi?id=439793&action=review
> 
> r=me
> 
> > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:106
> > +                (allow (with telemetry) iokit-external-method
> 
> Do we need telemetry on those two method numbers? Or should the telemetry be
> for any remaining denials?

I think this rule will give us telemetry for both. Or am I mistaken?

Thanks for reviewing!
Comment 5 Per Arne Vollan 2021-10-11 00:19:50 PDT
Created attachment 440760 [details]
Patch
Comment 6 EWS 2021-10-11 01:14:46 PDT
Committed r283886 (242763@main): <https://commits.webkit.org/242763@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 440760 [details].