[WK2][iOS] Update WebContent process sandbox profile for AWD logging
[WebKit-https.git] / Source / WebKit2 / Resources / SandboxProfiles / ios / com.apple.WebKit.WebContent.sb
index fe9c4d22359656710e72588e55e927e13ffe5141..0fb66f7d846962adea47207b2891a1afdd974a7f 100644 (file)
 ;; Various services required by CFNetwork and other frameworks
 (allow mach-lookup
     (global-name "com.apple.PowerManagement.control")
 ;; Various services required by CFNetwork and other frameworks
 (allow mach-lookup
     (global-name "com.apple.PowerManagement.control")
-    (global-name "com.apple.accountsd.accountmanager")
-    (global-name "com.apple.awdd"))
+    (global-name "com.apple.accountsd.accountmanager"))
 
 (deny file-write-create (vnode-type SYMLINK))
 (deny file-read-xattr file-write-xattr (xattr-regex #"^com\.apple\.security\.private\."))
 
 
 (deny file-write-create (vnode-type SYMLINK))
 (deny file-read-xattr file-write-xattr (xattr-regex #"^com\.apple\.security\.private\."))
 
+;; AWD logging
+(allow mach-lookup (global-name "com.apple.awdd"))
+(allow file-read* file-write*
+    (literal "/private/var/mobile/Library/Logs/awd/awd-com.apple.WebKit.WebContent.log"))
+
 (network-client (remote tcp))
 (network-client (remote tcp))