[Mac][WK2] Stop using file* rules in WebProcess sandbox profiles
authorbfulgham@apple.com <bfulgham@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 21 Dec 2016 22:02:48 +0000 (22:02 +0000)
committerbfulgham@apple.com <bfulgham@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 21 Dec 2016 22:02:48 +0000 (22:02 +0000)
commit5541eb46f023a3c2258a81ff3dc1d7c486a03657
treec997b1f829aa9e13ceff392bab07ec2022c6cfcc
parent97a3d9df83a444b55558ca886799bcc6107929e9
[Mac][WK2] Stop using file* rules in WebProcess sandbox profiles
https://bugs.webkit.org/show_bug.cgi?id=165824
<rdar://problem/14024823>

Reviewed by Alexey Proskuryakov

Switch from blanket 'file*' sandbox rules, to the specific 'file-read*' and 'file-write*' rules
we actually need.

* DatabaseProcess/mac/com.apple.WebKit.Databases.sb.in:
* PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in:
* WebProcess/com.apple.WebProcess.sb.in:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@210076 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/WebKit2/ChangeLog
Source/WebKit2/DatabaseProcess/mac/com.apple.WebKit.Databases.sb.in
Source/WebKit2/PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in
Source/WebKit2/WebProcess/com.apple.WebProcess.sb.in