Bug 232208

Summary: [macOS][GPUP] Remove access to mach services in sandbox
Product: WebKit Reporter: Per Arne Vollan <pvollan>
Component: WebKit Misc.Assignee: Per Arne Vollan <pvollan>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, darin, gavin.p, mazander, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
darin: review+
Patch
none
Patch none

Per Arne Vollan
Reported 2021-10-23 18:40:39 PDT
Remove access to mach services in the GPU process on macOS based on telemetry and similar changes previously made in the WebContent process' sandbox.
Attachments
Patch (4.45 KB, patch)
2021-10-23 18:46 PDT, Per Arne Vollan 		darin: review+
DetailsFormatted DiffDiff
Patch (4.15 KB, patch)
2021-11-11 18:53 PST, Per Arne Vollan 		no flags
DetailsFormatted DiffDiff
Patch (1.47 KB, patch)
2021-11-18 13:28 PST, Per Arne Vollan 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2021-10-23 18:41:12 PDT
<rdar://problem/84584565>
Per Arne Vollan
Comment 2 2021-10-23 18:46:06 PDT
Created attachment 442287 [details] Patch
Per Arne Vollan
Comment 3 2021-11-11 18:53:24 PST
Created attachment 444034 [details] Patch
Per Arne Vollan
Comment 4 2021-11-11 18:54:04 PST
Comment on attachment 444034 [details] Patch Thanks for reviewing!
EWS
Comment 5 2021-11-11 20:54:50 PST
Committed r285707 (244166@main): <https://commits.webkit.org/244166@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 444034 [details].
Per Arne Vollan
Comment 6 2021-11-18 13:28:16 PST
Reopening to attach new patch.
Per Arne Vollan
Comment 7 2021-11-18 13:28:17 PST
Created attachment 444726 [details] Patch
EWS
Comment 8 2021-11-18 15:01:25 PST
Committed r286031 (244419@main): <https://commits.webkit.org/244419@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 444726 [details].
Note You need to log in before you can comment on or make changes to this bug.