| Summary: | Expand adattributiond sandbox to prevent sandbox exceptions during main functionality | ||||||
|---|---|---|---|---|---|---|---|
| Product: | WebKit | Reporter: | Alex Christensen <achristensen> | ||||
| Component: | New Bugs | Assignee: | Alex Christensen <achristensen> | ||||
| Status: | RESOLVED FIXED | ||||||
| Severity: | Normal | CC: | pvollan, webkit-bug-importer | ||||
| Priority: | P2 | Keywords: | InRadar | ||||
| Version: | WebKit Nightly Build | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Attachments: |
|
||||||
|
Description
Alex Christensen
2022-03-07 21:06:32 PST
Created attachment 454070 [details]
Patch
Comment on attachment 454070 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=454070&action=review R=me. > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.adattributiond.sb:125 > + "com.apple.containermanagerd" I don't think this is strictly needed. Can you do without it? Comment on attachment 454070 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=454070&action=review >> Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.adattributiond.sb:125 >> + "com.apple.containermanagerd" > > I don't think this is strictly needed. Can you do without it? Maybe, but there were sandbox violations without it and all our other processes have it. I'm going to add it for now and we can consider removing it in the future with the others. Committed r290996 (248174@main): <https://commits.webkit.org/248174@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 454070 [details]. |