Update sandbox after r179367
authorap@apple.com <ap@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 1 Sep 2015 18:48:10 +0000 (18:48 +0000)
committerap@apple.com <ap@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 1 Sep 2015 18:48:10 +0000 (18:48 +0000)
https://bugs.webkit.org/show_bug.cgi?id=148683
rdar://problem/21767401

Reviewed by Darin Adler.

* Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@189223 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Source/WebKit2/ChangeLog
Source/WebKit2/Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb

index ae5206c..20bb514 100644 (file)
@@ -1,3 +1,13 @@
+2015-09-01  Alexey Proskuryakov  <ap@apple.com>
+
+        Update sandbox after r179367
+        https://bugs.webkit.org/show_bug.cgi?id=148683
+        rdar://problem/21767401
+
+        Reviewed by Darin Adler.
+
+        * Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb:
+
 2015-08-26  Andy Estes  <aestes@apple.com>
 
         [Content Filtering] Determine navigation and content policy before continuing to filter a load
index d317c44..4cf6fd9 100644 (file)
@@ -30,7 +30,7 @@
     (global-name "com.apple.GSSCred")
     (global-name "org.h5l.kcm"))
 (allow mach-lookup
-    (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\.com\.apple\.WebKit\.Plugin\.(32|64|Development)\[[0-9]+\]$")
+    (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\.com\.apple\.WebKit\.Plugin\.(32|64)(\.Development)?\[[0-9]+\]$")
     (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\.PluginProcess\[[0-9]+\]$"))
 
 (shared-preferences-read
@@ -55,7 +55,7 @@
 
 (if (defined? 'mach-register)
     (allow mach-register
-        (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\.com\.apple\.WebKit\.Plugin\.(32|64|Development)\[[0-9]+\]$")
+        (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\.com\.apple\.WebKit\.Plugin\.(32|64)(\.Development)?\[[0-9]+\]$")
         (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\.PluginProcess\[[0-9]+\]$")))
 
 (allow system-socket)