[iOS] Deny mach lookup access to frontboard services in the WebContent process
authorpvollan@apple.com <pvollan@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 26 Mar 2020 17:47:08 +0000 (17:47 +0000)
committerpvollan@apple.com <pvollan@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 26 Mar 2020 17:47:08 +0000 (17:47 +0000)
https://bugs.webkit.org/show_bug.cgi?id=209604

Reviewed by Darin Adler.

Source/WebKit:

Deny mach lookup access to "com.apple.frontboard.systemappservices" in the WebContent process on iOS.

Test: fast/sandbox/ios/sandbox-mach-lookup.html

* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

LayoutTests:

* fast/sandbox/ios/sandbox-mach-lookup-expected.txt:
* fast/sandbox/ios/sandbox-mach-lookup.html:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@259052 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests/ChangeLog
LayoutTests/fast/sandbox/ios/sandbox-mach-lookup-expected.txt
LayoutTests/fast/sandbox/ios/sandbox-mach-lookup.html
Source/WebKit/ChangeLog
Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

index f9ac754..c7cb5b8 100644 (file)
@@ -1,3 +1,13 @@
+2020-03-26  Per Arne Vollan  <pvollan@apple.com>
+
+        [iOS] Deny mach lookup access to frontboard services in the WebContent process
+        https://bugs.webkit.org/show_bug.cgi?id=209604
+
+        Reviewed by Darin Adler.
+
+        * fast/sandbox/ios/sandbox-mach-lookup-expected.txt:
+        * fast/sandbox/ios/sandbox-mach-lookup.html:
+
 2020-03-26  Antti Koivisto  <antti@apple.com>
 
         REGRESSION (r254669): Expand media button doesn't work on first try on photos on reddit.com
index 26fced6..ea83cae 100644 (file)
@@ -26,3 +26,4 @@ PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebConte
 PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.mobileassetd.v2") is false
 PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.iconservices") is false
 PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.lsd.mapdb") is false
+PASS internals.hasSandboxMachLookupAccessToGlobalName("com.apple.WebKit.WebContent", "com.apple.frontboard.systemappservices") is false
index 566bde1..8814f39 100644 (file)
@@ -29,6 +29,7 @@ if (window.internals) {
     shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.mobileassetd.v2\")");
     shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.iconservices\")");
     shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.lsd.mapdb\")");
+    shouldBeFalse("internals.hasSandboxMachLookupAccessToGlobalName(\"com.apple.WebKit.WebContent\", \"com.apple.frontboard.systemappservices\")");
 }
 </script>
 </head>
index 1468c31..d1d25fb 100644 (file)
@@ -1,5 +1,18 @@
 2020-03-26  Per Arne Vollan  <pvollan@apple.com>
 
+        [iOS] Deny mach lookup access to frontboard services in the WebContent process
+        https://bugs.webkit.org/show_bug.cgi?id=209604
+
+        Reviewed by Darin Adler.
+
+        Deny mach lookup access to "com.apple.frontboard.systemappservices" in the WebContent process on iOS.
+
+        Test: fast/sandbox/ios/sandbox-mach-lookup.html
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
+2020-03-26  Per Arne Vollan  <pvollan@apple.com>
+
         [iOS] Adopt ScreenProperties class.
         https://bugs.webkit.org/show_bug.cgi?id=191767
 
index c1e7a9e..dd401db 100644 (file)
         "com.apple.mt"
         "com.apple.preferences.sounds")
 
-    (allow mach-lookup (with telemetry-backtrace)
+    (deny mach-lookup (with telemetry-backtrace)
         (global-name "com.apple.frontboard.systemappservices")                 ; -[UIViewServiceInterface _createProcessAssertion] -> SBSProcessIDForDisplayIdentifier()
     )