REGRESSION(r229093): Re-enable Network Extension support in the WebContent process...
authorbfulgham@apple.com <bfulgham@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 22 May 2018 19:08:51 +0000 (19:08 +0000)
committerbfulgham@apple.com <bfulgham@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 22 May 2018 19:08:51 +0000 (19:08 +0000)
https://bugs.webkit.org/show_bug.cgi?id=185874
<rdar://problem/40454404>

Reviewed by Eric Carlson.

Add back a necessary XPC connection after locking down the network features in r229093.

* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
* WebProcess/com.apple.WebProcess.sb.in:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@232072 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Source/WebKit/ChangeLog
Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb
Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

index 545439b..c146e82 100644 (file)
@@ -1,3 +1,16 @@
+2018-05-22  Brent Fulgham  <bfulgham@apple.com>
+
+        REGRESSION(r229093): Re-enable Network Extension support in the WebContent process (Take 2)
+        https://bugs.webkit.org/show_bug.cgi?id=185874
+        <rdar://problem/40454404>
+
+        Reviewed by Eric Carlson.
+
+        Add back a necessary XPC connection after locking down the network features in r229093.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2018-05-22  Ryan Haddad  <ryanhaddad@apple.com>
 
         Unreviewed, rolling out r232052.
index 7e65542..9d91f54 100644 (file)
 
 ;; Network Extensions / VPN helper.
 (allow mach-lookup
-    (global-name "com.apple.nehelper"))
+    (global-name "com.apple.nehelper")
+    (global-name "com.apple.nesessionmanager"))
 
 ;; allow 3rd party applications to access nsurlstoraged's top level domain data cache
 (allow-well-known-system-group-container-literal-read
index e335aa0..833b518 100644 (file)
 
 ;; Network Extensions / VPN helper.
 (allow mach-lookup
-    (global-name "com.apple.nehelper"))
+    (global-name "com.apple.nehelper")
+    (global-name "com.apple.nesessionmanager"))
 
 #if PLATFORM(MAC)
 ;; FIXME should be removed when <rdar://problem/9347205> + related radar in Safari is fixed