[iOS WK2] Add extension read permission to network sandbox profile

<rdar://problem/17671574>

Reviewed by Alexey Proskuryakov and Oliver Hunt.

* Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@171959 268f45cc-cd09-0410-ab3c-d52691b4dbfc

diff --git a/Source/WebKit2/ChangeLog b/Source/WebKit2/ChangeLog
index e56a445..3ff9b63 100644 (file)
--- a/Source/WebKit2/ChangeLog
+++ b/Source/WebKit2/ChangeLog
@@ -1,3 +1,12 @@
+2014-08-01  Joseph Pecoraro  <pecoraro@apple.com>
+
+        [iOS WK2] Add extension read permission to network sandbox profile
+        <rdar://problem/17671574>
+
+        Reviewed by Alexey Proskuryakov and Oliver Hunt.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+
 2014-08-01  Oliver Hunt  <oliver@apple.com>
 
         Various frameworks may want to use the container temp directory, so our current restrictions are too tight

diff --git a/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb b/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb
index 8406735..dc8d963 100644 (file)
--- a/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb
+++ b/Source/WebKit2/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb
@@ -36,6 +36,7 @@
 
 ;; App sandbox extensions
 (allow file-read* file-write* (extension "com.apple.app-sandbox.read-write"))
+(allow file-read* (extension "com.apple.app-sandbox.read"))
 
 ;; IOKit user clients
 (allow iokit-open