RESOLVED FIXED231046
[iOS] Add message filter in the WebContent process' sandbox 
https://bugs.webkit.org/show_bug.cgi?id=231046
Summary [iOS] Add message filter in the WebContent process' sandbox
Per Arne Vollan
Reported 2021-09-30 16:30:09 PDT
Add IOKit message filter in the WebContent process' sandbox on iOS.
Attachments
Patch (1.59 KB, patch)
2021-09-30 16:35 PDT, Per Arne Vollan 		no flags
DetailsFormatted DiffDiff
Patch (1.58 KB, patch)
2021-10-11 00:19 PDT, Per Arne Vollan 		no flags
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2021-09-30 16:32:31 PDT
<rdar://problem/83743661>
Per Arne Vollan
Comment 2 2021-09-30 16:35:13 PDT
Created attachment 439793 [details] Patch
Brent Fulgham
Comment 3 2021-10-01 09:27:59 PDT
Comment on attachment 439793 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=439793&action=review r=me > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:106 > + (allow (with telemetry) iokit-external-method Do we need telemetry on those two method numbers? Or should the telemetry be for any remaining denials?
Per Arne Vollan
Comment 4 2021-10-01 14:17:35 PDT
(In reply to Brent Fulgham from comment #3) > Comment on attachment 439793 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=439793&action=review > > r=me > > > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:106 > > + (allow (with telemetry) iokit-external-method > > Do we need telemetry on those two method numbers? Or should the telemetry be > for any remaining denials? I think this rule will give us telemetry for both. Or am I mistaken? Thanks for reviewing!
Per Arne Vollan
Comment 5 2021-10-11 00:19:50 PDT
Created attachment 440760 [details] Patch
EWS
Comment 6 2021-10-11 01:14:46 PDT
Committed r283886 (242763@main): <https://commits.webkit.org/242763@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 440760 [details].
Note You need to log in before you can comment on or make changes to this bug.