Bug 237009 - Allow adattributiond to start on iOS devices
Summary: Allow adattributiond to start on iOS devices
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: New Bugs (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Alex Christensen
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2022-02-21 17:11 PST by Alex Christensen
Modified: 2022-02-21 20:57 PST (History)
2 users (show)

See Also:


Attachments
Patch (2.67 KB, patch)
2022-02-21 17:13 PST, Alex Christensen
no flags Details | Formatted Diff | Diff
Patch (3.99 KB, patch)
2022-02-21 17:47 PST, Alex Christensen
achristensen: commit-queue+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Alex Christensen 2022-02-21 17:11:16 PST
Allow adattributiond to start on iOS devices
Comment 1 Alex Christensen 2022-02-21 17:13:45 PST
Created attachment 452801 [details]
Patch
Comment 2 Alex Christensen 2022-02-21 17:13:49 PST
<rdar://problem/89062166>
Comment 3 Per Arne Vollan 2022-02-21 17:16:29 PST
Comment on attachment 452801 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=452801&action=review

R=me.

> Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.adattributiond.sb:79
> +(allow file-read* file-map-executable
> +       (subpath "/System/Library/Frameworks")
> +       (subpath "/System/Library/PrivateFrameworks"))
> +

Could this be limited to only the WebKit framework?
Comment 4 Alex Christensen 2022-02-21 17:47:33 PST
Created attachment 452805 [details]
Patch
Comment 5 Alex Christensen 2022-02-21 17:48:48 PST
(In reply to Per Arne Vollan from comment #3)
> Comment on attachment 452801 [details]
> Patch
> 
> View in context:
> https://bugs.webkit.org/attachment.cgi?id=452801&action=review
> 
> R=me.
> 
> > Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.adattributiond.sb:79
> > +(allow file-read* file-map-executable
> > +       (subpath "/System/Library/Frameworks")
> > +       (subpath "/System/Library/PrivateFrameworks"))
> > +
> 
> Could this be limited to only the WebKit framework?

We need CFNetwork, among others.  I'm basing the abilities I'm adding on what the network process has access to.
Comment 6 Alex Christensen 2022-02-21 20:57:57 PST
r290288