Bug 264456

Summary: Update Network Process sandboxes to allow SYS_unlinkat to support the C++ library implementation
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit Misc.Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED WONTFIX    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Brent Fulgham
Reported 2023-11-08 17:03:53 PST
Telemetry shows us that the C++ library (specifically the `fs::filesystem` implementations) use `unlinkat`syscall. We don't allow that in our sandbox, leading to files not being deleted. This patch updates our Network process sandboxes to support this operation. <rdar://106765639>
Attachments
Brent Fulgham
Comment 1 2023-11-08 17:13:06 PST
Brent Fulgham
Comment 2 2023-11-09 16:30:11 PST
Digging further, I discovered that the `libcxx` code path is not used for shipping software. It must have been a hit for a custom build of some kind that turned off the higher-performance file operations we normally use. So I'm going to close this -- no need to change the sandbox.
Note You need to log in before you can comment on or make changes to this bug.