Bug 206098 - [iOS] Remove access to 'awd' directories
Summary: [iOS] Remove access to 'awd' directories
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit2 (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Brent Fulgham
URL:
Keywords: InRadar
Depends on: 206095
Blocks:
  Show dependency treegraph
 
Reported: 2020-01-10 14:44 PST by Brent Fulgham
Modified: 2020-01-23 13:15 PST (History)
4 users (show)

See Also:


Attachments
Patch (2.12 KB, patch)
2020-01-23 12:14 PST, Brent Fulgham
no flags Details | Formatted Diff | Diff
Patch (3.48 KB, patch)
2020-01-23 12:16 PST, Brent Fulgham
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Brent Fulgham 2020-01-10 14:44:22 PST
Confirm that we no longer touch these directories, then remove them from the sandbox.
Comment 1 Radar WebKit Bug Importer 2020-01-10 14:44:44 PST
<rdar://problem/58491816>
Comment 2 Per Arne Vollan 2020-01-10 15:11:09 PST
Are we also ready to block mach lookup access to awdd?
Comment 3 Brent Fulgham 2020-01-10 15:12:51 PST
(In reply to Per Arne Vollan from comment #2)
> Are we also ready to block mach lookup access to awdd?

That's in Bug 206095. Once we block (in that bug), I suspect we can remove this access. But I didn't want to do it in one patch, because I don't think we've adequately tested the lack of these directory access rules.
Comment 4 Brent Fulgham 2020-01-23 12:14:17 PST
Created attachment 388575 [details]
Patch
Comment 5 Brent Fulgham 2020-01-23 12:16:48 PST
Created attachment 388576 [details]
Patch
Comment 6 Per Arne Vollan 2020-01-23 12:50:52 PST
Comment on attachment 388576 [details]
Patch

R=me.
Comment 7 WebKit Commit Bot 2020-01-23 13:15:00 PST
Comment on attachment 388576 [details]
Patch

Clearing flags on attachment: 388576

Committed r254999: <https://trac.webkit.org/changeset/254999>
Comment 8 WebKit Commit Bot 2020-01-23 13:15:01 PST
All reviewed patches have been landed.  Closing bug.