[macOS] Relax WebKit sandbox to permit proper App Store behavior
authorbfulgham@apple.com <bfulgham@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 20 Jul 2018 17:45:38 +0000 (17:45 +0000)
committerbfulgham@apple.com <bfulgham@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 20 Jul 2018 17:45:38 +0000 (17:45 +0000)
https://bugs.webkit.org/show_bug.cgi?id=187831
<rdar://problem/42047455>

Reviewed by Alexey Proskuryakov.

The Mac App Store is unable to perform some gift card redemption tasks on macOS due to missing sandbox permissions.
This patch adds those permissions.

* PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@234054 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Source/WebKit/ChangeLog
Source/WebKit/PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in

index 7a0f591..ccc60d0 100644 (file)
@@ -1,3 +1,16 @@
+2018-07-20  Brent Fulgham  <bfulgham@apple.com>
+
+        [macOS] Relax WebKit sandbox to permit proper App Store behavior
+        https://bugs.webkit.org/show_bug.cgi?id=187831
+        <rdar://problem/42047455>
+
+        Reviewed by Alexey Proskuryakov.
+
+        The Mac App Store is unable to perform some gift card redemption tasks on macOS due to missing sandbox permissions.
+        This patch adds those permissions.
+
+        * PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in:
+
 2018-07-20  Brady Eidson  <beidson@apple.com>
 
         Add WKNavigation/WKNavigationAction related SPI.
index e893fef..8cb98ce 100644 (file)
 ;; Various services required by AppKit and other frameworks
 (allow mach-lookup
     (global-name "com.apple.audio.AudioComponentRegistrar")
+    (global-name "com.apple.assertiond.processassertionconnection")
     (global-name "com.apple.CoreServices.coreservicesd")
     (global-name "com.apple.DiskArbitration.diskarbitrationd")
     (global-name "com.apple.FileCoordination")
     (global-name "com.apple.ocspd")
     (global-name "com.apple.pasteboard.1")
     (global-name "com.apple.pbs.fetch_services")
+    (global-name "com.apple.tccd")
     (global-name "com.apple.tccd.system")
     (global-name "com.apple.tsm.uiserver")
     (global-name "com.apple.window_proxies")