Bug 180610 - [iOS] Don't import 'UIKit-apps.sb' to the WebContent process sandbox
Summary: [iOS] Don't import 'UIKit-apps.sb' to the WebContent process sandbox
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit2 (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Brent Fulgham
Keywords: InRadar
Depends on:
Blocks: 180670
  Show dependency treegraph
Reported: 2017-12-08 15:08 PST by Brent Fulgham
Modified: 2017-12-11 13:58 PST (History)
6 users (show)

See Also:

Patch (22.29 KB, patch)
2017-12-08 15:10 PST, Brent Fulgham
dino: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Brent Fulgham 2017-12-08 15:08:00 PST
Currently the WebContent process sandbox includes the global "UIKit-apps.sb" sandbox. We should just duplicate the contents of that file, and remove things we don't use so that we can decrease the range of things our process has access too.

This patch is a first step, which just does a copy/paste of the sandbox rules. There should be no change in function.
Comment 1 Brent Fulgham 2017-12-08 15:10:22 PST
Created attachment 328875 [details]
Comment 2 Brent Fulgham 2017-12-11 13:25:53 PST
Committed r225754: <https://trac.webkit.org/changeset/225754>
Comment 3 Radar WebKit Bug Importer 2017-12-11 13:26:24 PST
Comment 4 Brent Fulgham 2017-12-11 13:26:57 PST
Part of the effort to complete <rdar://problem/18899506>.