Bug 197568 – Investigate no longer resolving symlinks when creating a SandboxExtension

• Status: REOPENED
• Component: WebKit2

[Brent Fulgham]

When we originally wrote the SandboxExtension logic for handling files, we believed that they had to be defined in terms of the canonical paths on the file system. We added logic to resolve symlinks prior to issuing the extensions.

We now know that this is unnecessary work, and could be avoided entirely. This is likely to improve performance of certain file operations, and should be investigated as a way to further improve performance.

[Brent Fulgham]

<rdar://problem/14062743>

[Brent Fulgham]

After discussing this with Sandbox experts, it is not true that we can avoid resolving symlinks. We should not pursue this idea.

[Brent Fulgham]

Whoops -- we need fully-resolved names in Sandbox profile rules. But I think we can pass a sandbox extension to a path containing symlinks, and it's usable.