Bug 223641 - [iOS] Read access to passwd is required
Summary: [iOS] Read access to passwd is required
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit Website (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Per Arne Vollan
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2021-03-23 09:26 PDT by Per Arne Vollan
Modified: 2021-04-27 10:07 PDT (History)
3 users (show)

See Also:


Attachments
Patch (1.25 KB, patch)
2021-03-23 09:28 PDT, Per Arne Vollan
bfulgham: review+
Details | Formatted Diff | Diff
Patch (1.25 KB, patch)
2021-03-23 09:37 PDT, Per Arne Vollan
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Per Arne Vollan 2021-03-23 09:26:10 PDT
The WebContent sandbox on iOS should allow reading the passwd file.
Comment 1 Per Arne Vollan 2021-03-23 09:26:33 PDT
<rdar://75616105>
Comment 2 Per Arne Vollan 2021-03-23 09:28:09 PDT
Created attachment 424026 [details]
Patch
Comment 3 Per Arne Vollan 2021-03-23 09:30:18 PDT
This patch is not intended for ToT.
Comment 4 Brent Fulgham 2021-03-23 09:33:32 PDT
Comment on attachment 424026 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=424026&action=review

r=me

> Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:-586
> -      (literal "/private/etc/passwd"))

Oh, no! I missed that one.
Comment 5 Per Arne Vollan 2021-03-23 09:37:37 PDT
Created attachment 424028 [details]
Patch
Comment 6 Per Arne Vollan 2021-03-23 09:42:19 PDT
(In reply to Brent Fulgham from comment #4)
> Comment on attachment 424026 [details]
> Patch
> 
> View in context:
> https://bugs.webkit.org/attachment.cgi?id=424026&action=review
> 
> r=me
> 
> > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:-586
> > -      (literal "/private/etc/passwd"))
> 
> Oh, no! I missed that one.

I believe this was incorrectly added by myself in https://trac.webkit.org/changeset/274231/webkit.

Thanks for reviewing!