[WK2][iOS][macOS] Expand sandbox to access vm.footprint_suspend
authorbfulgham@apple.com <bfulgham@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 5 May 2017 22:23:51 +0000 (22:23 +0000)
committerbfulgham@apple.com <bfulgham@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 5 May 2017 22:23:51 +0000 (22:23 +0000)
https://bugs.webkit.org/show_bug.cgi?id=171749
<rdar://problem/32019494>

Reviewed by Geoffrey Garen.

The 'sysctl' whitelist needs to be extended to support an additional VM-related feature.

* DatabaseProcess/mac/com.apple.WebKit.Databases.sb.in:
* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
* PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in:
* Resources/SandboxProfiles/ios/com.apple.WebKit.Databases.sb:
* Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
* WebProcess/com.apple.WebProcess.sb.in:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@216277 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Source/WebKit2/ChangeLog
Source/WebKit2/DatabaseProcess/mac/com.apple.WebKit.Databases.sb.in
Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in
Source/WebKit2/PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in
Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.Databases.sb
Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb
Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb
Source/WebKit2/WebProcess/com.apple.WebProcess.sb.in

index 04e958d..c193b18 100644 (file)
@@ -1,3 +1,21 @@
+2017-05-05  Brent Fulgham  <bfulgham@apple.com>
+
+        [WK2][iOS][macOS] Expand sandbox to access vm.footprint_suspend 
+        https://bugs.webkit.org/show_bug.cgi?id=171749
+        <rdar://problem/32019494>
+
+        Reviewed by Geoffrey Garen.
+
+        The 'sysctl' whitelist needs to be extended to support an additional VM-related feature.
+
+        * DatabaseProcess/mac/com.apple.WebKit.Databases.sb.in:
+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+        * PluginProcess/mac/com.apple.WebKit.plugin-common.sb.in:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Databases.sb:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2017-05-05  John Wilander  <wilander@apple.com>
 
         Resource Load Statistics: Don't cover in-memory and disk caches during website data removal
index 136a340..f188f8a 100644 (file)
@@ -39,7 +39,8 @@
         "hw.availcpu"
         "hw.ncpu"
         "hw.model"
-        "kern.memorystatus_level"))
+        "kern.memorystatus_level"
+        "vm.footprint_suspend"))
 
 (deny iokit-get-properties)
 #endif
index 4ebe5e9..a4b7701 100644 (file)
@@ -39,7 +39,8 @@
         "hw.availcpu"
         "hw.ncpu"
         "hw.model"
-        "kern.memorystatus_level"))
+        "kern.memorystatus_level"
+        "vm.footprint_suspend"))
 
 (deny iokit-get-properties)
 #endif
index f08f042..393c657 100644 (file)
@@ -39,7 +39,8 @@
         "hw.availcpu"
         "hw.ncpu"
         "hw.model"
-        "kern.memorystatus_level"))
+        "kern.memorystatus_level"
+        "vm.footprint_suspend"))
 
 (deny iokit-get-properties)
 (allow iokit-get-properties
index 9a3c7f2..4b14cd1 100644 (file)
@@ -36,4 +36,5 @@
         "hw.availcpu"
         "hw.ncpu"
         "hw.model"
-        "kern.memorystatus_level"))
+        "kern.memorystatus_level"
+        "vm.footprint_suspend"))
index 0b204cd..4fd1376 100644 (file)
@@ -34,7 +34,8 @@
         "hw.availcpu"
         "hw.ncpu"
         "hw.model"
-        "kern.memorystatus_level"))
+        "kern.memorystatus_level"
+        "vm.footprint_suspend"))
 
 ;; Access to client's cache folder & re-vending to CFNetwork.
 ;; FIXME: Remove the webkit specific extension classes <rdar://problem/17755931>
index e2435f2..5778840 100644 (file)
@@ -40,7 +40,8 @@
         "hw.availcpu"
         "hw.ncpu"
         "hw.model"
-        "kern.memorystatus_level"))
+        "kern.memorystatus_level"
+        "vm.footprint_suspend"))
 
 ;; Read-only preferences and data
 (mobile-preferences-read
index 52ff184..44ab97c 100644 (file)
@@ -42,7 +42,8 @@
         "hw.availcpu"
         "hw.ncpu"
         "hw.model"
-        "kern.memorystatus_level"))
+        "kern.memorystatus_level"
+        "vm.footprint_suspend"))
 
 (deny iokit-get-properties)
 (allow iokit-get-properties