Bug 232208

Summary: [macOS][GPUP] Remove access to mach services in sandbox
Product: WebKit Reporter: Per Arne Vollan <pvollan>
Component: WebKit Misc.Assignee: Per Arne Vollan <pvollan>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, darin, gavin.p, mazander, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
darin: review+
Patch
none
Patch none

Description Per Arne Vollan 2021-10-23 18:40:39 PDT 
Remove access to mach services in the GPU process on macOS based on telemetry and similar changes previously made in the WebContent process' sandbox.
Comment 1 Radar WebKit Bug Importer 2021-10-23 18:41:12 PDT 
<rdar://problem/84584565>
Comment 2 Per Arne Vollan 2021-10-23 18:46:06 PDT 
Created attachment 442287 [details]
Patch
Comment 3 Per Arne Vollan 2021-11-11 18:53:24 PST 
Created attachment 444034 [details]
Patch
Comment 4 Per Arne Vollan 2021-11-11 18:54:04 PST 
Comment on attachment 444034 [details]
Patch

Thanks for reviewing!
Comment 5 EWS 2021-11-11 20:54:50 PST 
Committed r285707 (244166@main): <https://commits.webkit.org/244166@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 444034 [details].
Comment 6 Per Arne Vollan 2021-11-18 13:28:16 PST 
Reopening to attach new patch.
Comment 7 Per Arne Vollan 2021-11-18 13:28:17 PST 
Created attachment 444726 [details]
Patch
Comment 8 EWS 2021-11-18 15:01:25 PST 
Committed r286031 (244419@main): <https://commits.webkit.org/244419@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 444726 [details].