Bug 193828 - [iOS] Deny mach lookups to services not used.
Summary: [iOS] Deny mach lookups to services not used.
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit Misc. (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Per Arne Vollan
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2019-01-25 10:15 PST by Per Arne Vollan
Modified: 2019-12-17 10:28 PST (History)
3 users (show)

See Also:


Attachments
Patch (1.61 KB, patch)
2019-01-25 10:18 PST, Per Arne Vollan
no flags Details | Formatted Diff | Diff
Patch (3.06 KB, patch)
2019-01-25 12:42 PST, Per Arne Vollan
bfulgham: review+
Details | Formatted Diff | Diff
Patch (3.17 KB, patch)
2019-01-25 13:02 PST, Per Arne Vollan
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Per Arne Vollan 2019-01-25 10:15:57 PST
Start denying mach lookups to iOS services, which were previously allowed with reporting. Living-on has indicated that these services are not used.
Comment 1 Radar WebKit Bug Importer 2019-01-25 10:16:27 PST
<rdar://problem/47553000>
Comment 2 Per Arne Vollan 2019-01-25 10:18:14 PST
Created attachment 360120 [details]
Patch
Comment 3 Per Arne Vollan 2019-01-25 12:42:29 PST
Created attachment 360147 [details]
Patch
Comment 4 Brent Fulgham 2019-01-25 12:50:17 PST
Comment on attachment 360147 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=360147&action=review

> Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:454
> +;; FIXME: remove duplicates once the final list have been established.

Please add a bugzilla # so we remember to do this work.
Comment 5 Per Arne Vollan 2019-01-25 13:02:28 PST
Created attachment 360149 [details]
Patch
Comment 6 Per Arne Vollan 2019-01-25 13:03:51 PST
(In reply to Brent Fulgham from comment #4)
> Comment on attachment 360147 [details]
> Patch
> 
> View in context:
> https://bugs.webkit.org/attachment.cgi?id=360147&action=review
> 
> > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:454
> > +;; FIXME: remove duplicates once the final list have been established.
> 
> Please add a bugzilla # so we remember to do this work.

Done. Thanks for reviewing!
Comment 7 WebKit Commit Bot 2019-01-25 13:40:16 PST
Comment on attachment 360149 [details]
Patch

Clearing flags on attachment: 360149

Committed r240500: <https://trac.webkit.org/changeset/240500>