Bug 232389

Summary: [iOS][GPUP] Remove sandbox read access to files
Product: WebKit Reporter: Per Arne Vollan <pvollan>
Component: WebKit Misc.Assignee: Per Arne Vollan <pvollan>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, gavin.p, mazander, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
bfulgham: review+, ews-feeder: commit-queue-
Patch none

Description Per Arne Vollan 2021-10-27 10:40:16 PDT 
Based on telemetry, remove read access to files in the GPU process' sandbox on iOS.
Comment 1 Radar WebKit Bug Importer 2021-10-27 10:40:51 PDT 
<rdar://problem/84717349>
Comment 2 Per Arne Vollan 2021-10-27 10:45:03 PDT 
Created attachment 442607 [details]
Patch
Comment 3 Brent Fulgham 2021-10-27 14:10:35 PDT 
Comment on attachment 442607 [details]
Patch

r=me
Comment 4 Per Arne Vollan 2021-11-10 08:53:27 PST 
Comment on attachment 442607 [details]
Patch

Thanks for reviewing!
Comment 5 EWS 2021-11-10 09:07:08 PST 
Tools/Scripts/svn-apply failed to apply attachment 442607 [details] to trunk.
Please resolve the conflicts and upload a new patch.
Comment 6 Per Arne Vollan 2021-11-10 10:03:24 PST 
Created attachment 443826 [details]
Patch
Comment 7 EWS 2021-11-10 11:04:46 PST 
Committed r285593 (244101@main): <https://commits.webkit.org/244101@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 443826 [details].