It'll prevent various pthread permissions switching APIs from working. But we can only do that on internal builds where we use the fast permission switching macro. We can't do it for open source builds, where we rely on the pthread API.
Created attachment 420890 [details] WIP
<rdar://problem/74769414>
rdar://74284026
Created attachment 430429 [details] work in progress.
Created attachment 430444 [details] proposed patch.
Created attachment 430446 [details] proposed patch.
Comment on attachment 430446 [details] proposed patch. R=me. Would it be sufficient to only add the entitlement to the WebContent XPC service?
(In reply to Per Arne Vollan from comment #7) > Comment on attachment 430446 [details] > proposed patch. > > R=me. Would it be sufficient to only add the entitlement to the WebContent > XPC service? Thanks. For our purpose, the goal of the entitlement isn't to gain access to something. Instead, by adopting the entitlement, we disable access to various pthread permissions switching APIs. Hence, we do want to add this entitlement to all processes because we want to disable those APIs on all processes.
Created attachment 431613 [details] proposed patch.
Comment on attachment 431613 [details] proposed patch. R=me.
Committed r278966 (238893@main): <https://commits.webkit.org/238893@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 431613 [details].