[Mac] Allow com.apple.GSSCred in WebKit sandbox profiles
authorap@apple.com <ap@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 7 Mar 2014 06:32:24 +0000 (06:32 +0000)
committerap@apple.com <ap@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 7 Mar 2014 06:32:24 +0000 (06:32 +0000)
https://bugs.webkit.org/show_bug.cgi?id=129777
<rdar://problem/16050832>

Reviewed by Anders Carlsson.

* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
* Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb:
* WebProcess/com.apple.WebProcess.sb.in:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@165250 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Source/WebKit2/ChangeLog
Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in
Source/WebKit2/Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb
Source/WebKit2/WebProcess/com.apple.WebProcess.sb.in

index 2f65efe..c46b0cd 100644 (file)
@@ -1,3 +1,15 @@
+2014-03-06  Alexey Proskuryakov  <ap@apple.com>
+
+        [Mac] Allow com.apple.GSSCred in WebKit sandbox profiles
+        https://bugs.webkit.org/show_bug.cgi?id=129777
+        <rdar://problem/16050832>
+
+        Reviewed by Anders Carlsson.
+
+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+        * Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2014-03-06  Filip Pizlo  <fpizlo@apple.com>
 
         If the FTL is build-time enabled then it should be run-time enabled.
index a360517..fafec09 100644 (file)
 ;; FIXME should be removed when <rdar://problem/9347205> + related radar in Safari is fixed
 (allow mach-lookup
     (global-name "org.h5l.kcm")
+    (global-name "com.apple.GSSCred")
     (global-name "com.apple.system.logger")
     (global-name "com.apple.system.notification_center"))
 (allow network-outbound
index 3dfbbd6..b440f31 100644 (file)
@@ -4,6 +4,7 @@
     (global-name "com.apple.ist.ds.appleconnect2.service.kdctunnelcontroller")
     (global-name "com.apple.ist.ds.appleconnect2.service.menuextra")
     (global-name "com.apple.wifi.anqp")
+    (global-name "com.apple.GSSCred")
     (global-name "org.h5l.kcm"))
 (allow mach-lookup
     (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\.com\.apple\.WebKit\.Plugin\.(32|64|Development)\[[0-9]+\]$")
index 623cbea..7989c2a 100644 (file)
 ;; FIXME should be removed when <rdar://problem/9347205> + related radar in Safari is fixed
 (allow mach-lookup
        (global-name "org.h5l.kcm")
+       (global-name "com.apple.GSSCred")
        (global-name "com.apple.system.logger")
        (global-name "com.apple.system.notification_center"))
 (allow network-outbound