RESOLVED WONTFIX264456
Update Network Process sandboxes to allow SYS_unlinkat to support the C++ library implementation 
https://bugs.webkit.org/show_bug.cgi?id=264456
Summary Update Network Process sandboxes to allow SYS_unlinkat to support the C++ lib...
Brent Fulgham
Reported 2023-11-08 17:03:53 PST
Telemetry shows us that the C++ library (specifically the `fs::filesystem` implementations) use `unlinkat`syscall. We don't allow that in our sandbox, leading to files not being deleted. This patch updates our Network process sandboxes to support this operation. <rdar://106765639>
Attachments
Add attachment proposed patch, testcase, etc.
Brent Fulgham
Comment 1 2023-11-08 17:13:06 PST
Pull request: https://github.com/WebKit/WebKit/pull/20207
Brent Fulgham
Comment 2 2023-11-09 16:30:11 PST
Digging further, I discovered that the `libcxx` code path is not used for shipping software. It must have been a hit for a custom build of some kind that turned off the higher-performance file operations we normally use. So I'm going to close this -- no need to change the sandbox.
Note You need to log in before you can comment on or make changes to this bug.