We already do this on macOS, we should do it on iOS as well.
Created attachment 360041 [details] Patch
<rdar://problem/47529440>
Comment on attachment 360041 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=360041&action=review r=me, assuming you tested on shipping iOS to make sure it doesn't break test bots. > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:560 > + (allow syscall-unix (with report)) Does this mean we will report, unless it is explicitly allowed below?
(In reply to Brent Fulgham from comment #3) > Comment on attachment 360041 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=360041&action=review > > r=me, assuming you tested on shipping iOS to make sure it doesn't break test > bots. > I believe this is a low risk change, since we by default allow all calls. > > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:560 > > + (allow syscall-unix (with report)) > > Does this mean we will report, unless it is explicitly allowed below? Yes. Thanks for reviewing!
Comment on attachment 360041 [details] Patch Clearing flags on attachment: 360041 Committed r240478: <https://trac.webkit.org/changeset/240478>
All reviewed patches have been landed. Closing bug.