Fix AppleConnect issues for WiFi interfaces
authorcommit-queue@webkit.org <commit-queue@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 10 May 2013 23:42:07 +0000 (23:42 +0000)
committercommit-queue@webkit.org <commit-queue@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 10 May 2013 23:42:07 +0000 (23:42 +0000)
<rdar://problem/13776227&13776240&13776281>
https://bugs.webkit.org/show_bug.cgi?id=115932

Patch by Simon Cooper <scooper@apple.com> on 2013-05-10
Reviewed by Alexey Proskuryakov.

Add support for WiFi interfaces for the AppleConnect plugin.
Remove the FIXME.

* Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@149913 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Source/WebKit2/ChangeLog
Source/WebKit2/Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb

index a98173e..42a1a5f 100644 (file)
@@ -1,3 +1,16 @@
+2013-05-10  Simon Cooper  <scooper@apple.com>
+
+        Fix AppleConnect issues for WiFi interfaces
+        <rdar://problem/13776227&13776240&13776281>
+        https://bugs.webkit.org/show_bug.cgi?id=115932
+
+        Reviewed by Alexey Proskuryakov.
+
+        Add support for WiFi interfaces for the AppleConnect plugin.
+        Remove the FIXME.
+
+        * Resources/PlugInSandboxProfiles/com.apple.ist.ds.appleconnect.webplugin.sb:
+
 2013-05-10  Zoltan Arvai  <zarvai@inf.u-szeged.hu>
 
         [Qt][Mac] Unreviewed speculative build fix after r149904.
index 6e2ec10..c375d68 100644 (file)
@@ -3,10 +3,8 @@
     (global-name "com.apple.ist.ds.appleconnect2.service.agent")
     (global-name "com.apple.ist.ds.appleconnect2.service.kdctunnelcontroller")
     (global-name "com.apple.ist.ds.appleconnect2.service.menuextra")
+    (global-name "com.apple.wifi.anqp")
     (global-name "org.h5l.kcm"))
-;; FIXME: This is explicitly being called out <rdar://problem/13481170>
-(deny mach-lookup
-    (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\..*\[[0-9]+\]$"))
 (allow mach-lookup
     (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\.PluginProcess\[[0-9]+\]$"))
 
@@ -22,6 +20,7 @@
 (allow file-read*
     (subpath "/Library/KerberosPlugins/GSSAPI")
     (literal "/Library/Preferences/edu.mit.Kerberos")
+    (literal "/Library/Preferences/SystemConfiguration/preferences.plist")
     (home-library-preferences-literal "/edu.mit.Kerberos"))
 
 (allow file-read*
@@ -31,6 +30,7 @@
     (allow mach-register
         (global-name-regex #"^com\.apple\.ist\.ds\.appleconnect2\.service\.PluginProcess\[[0-9]+\]$")))
 
+(allow system-socket)
 (allow network-outbound
    (remote udp "*:4160" "*:88"))
 (allow network-inbound