Bug 234641

Summary: Allow a necessary syscall in the WebContent sandbox
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit Misc.Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, pvollan, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

Description Brent Fulgham 2021-12-23 11:56:17 PST
Telemetry and test data indicates we need to allow 'SYS_memorystatus_control' in our WebContent sandbox.

We allow this in all other sandboxes, so this was likely an oversight.
Comment 1 Brent Fulgham 2021-12-23 11:56:34 PST
<rdar://problem/86808395>
Comment 2 Brent Fulgham 2021-12-23 11:59:43 PST
Created attachment 447895 [details]
Patch
Comment 3 zalan 2021-12-23 13:35:24 PST
Comment on attachment 447895 [details]
Patch

rs=me
Comment 4 EWS 2021-12-23 14:01:47 PST
Committed r287413 (245548@main): <https://commits.webkit.org/245548@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 447895 [details].