Bug 231046

Summary: [iOS] Add message filter in the WebContent process' sandbox
Product: WebKit Reporter: Per Arne Vollan <pvollan>
Component: WebKit Misc.Assignee: Per Arne Vollan <pvollan>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, gavin.p, mazander, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
none
Patch none

Per Arne Vollan
Reported 2021-09-30 16:30:09 PDT
Add IOKit message filter in the WebContent process' sandbox on iOS.
Attachments
Patch (1.59 KB, patch)
2021-09-30 16:35 PDT, Per Arne Vollan
no flags
Patch (1.58 KB, patch)
2021-10-11 00:19 PDT, Per Arne Vollan
no flags
Radar WebKit Bug Importer
Comment 1 2021-09-30 16:32:31 PDT
Per Arne Vollan
Comment 2 2021-09-30 16:35:13 PDT
Brent Fulgham
Comment 3 2021-10-01 09:27:59 PDT
Comment on attachment 439793 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=439793&action=review r=me > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:106 > + (allow (with telemetry) iokit-external-method Do we need telemetry on those two method numbers? Or should the telemetry be for any remaining denials?
Per Arne Vollan
Comment 4 2021-10-01 14:17:35 PDT
(In reply to Brent Fulgham from comment #3) > Comment on attachment 439793 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=439793&action=review > > r=me > > > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:106 > > + (allow (with telemetry) iokit-external-method > > Do we need telemetry on those two method numbers? Or should the telemetry be > for any remaining denials? I think this rule will give us telemetry for both. Or am I mistaken? Thanks for reviewing!
Per Arne Vollan
Comment 5 2021-10-11 00:19:50 PDT
EWS
Comment 6 2021-10-11 01:14:46 PDT
Committed r283886 (242763@main): <https://commits.webkit.org/242763@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 440760 [details].
Note You need to log in before you can comment on or make changes to this bug.