Clean up sandbox violations found during testing
authorbfulgham@apple.com <bfulgham@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Sat, 14 Mar 2020 01:43:54 +0000 (01:43 +0000)
committerbfulgham@apple.com <bfulgham@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Sat, 14 Mar 2020 01:43:54 +0000 (01:43 +0000)
https://bugs.webkit.org/show_bug.cgi?id=209096
<rdar://problem/59931477>

Reviewed by Geoffrey Garen.

Remove telemetry from some items, and allow access to some IOKit properties
needed for media playback on macOS and iOS.

* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
* WebProcess/com.apple.WebProcess.sb.in:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@258456 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Source/WebKit/ChangeLog
Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb
Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

index 335d0b0..de919e1 100644 (file)
@@ -1,3 +1,17 @@
+2020-03-13  Brent Fulgham  <bfulgham@apple.com>
+
+        Clean up sandbox violations found during testing
+        https://bugs.webkit.org/show_bug.cgi?id=209096
+        <rdar://problem/59931477>
+
+        Reviewed by Geoffrey Garen.
+
+        Remove telemetry from some items, and allow access to some IOKit properties
+        needed for media playback on macOS and iOS.
+
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2020-03-13  Chris Dumez  <cdumez@apple.com>
 
         Unreviewed, drop unused variable in WebPageProxy::backForwardGoToItem().
index 37e1f09..1972cb0 100644 (file)
         "kern.osvariant_status"
         "kern.secure_kernel" ;; Needed by XPC bundle resolution
         "kern.version"
+        "sysctl.name2oid"
         "vm.footprint_suspend")
     (sysctl-name-regex #"^net.routetable") ;; <rdar://problem/57665153>
 )
     (iokit-property "dfr")
     (iokit-property "display-corner-radius") ;; <rdar://problem/50602737>
     (iokit-property "emu")
+    (iokit-property "external")
     (iokit-property "graphics-featureset-class") ;; <rdar://problem/49497720>
     (iokit-property "graphics-featureset-fallbacks") ;; <rdar://problem/51322072>
     (iokit-property "hdcp-hoover-protocol")
index 5da4670..38e0d4f 100644 (file)
     (with report) (with telemetry)
 #endif
     (iokit-user-client-class "AppleMultitouchDeviceUserClient")
-    (iokit-user-client-class "AppleUpstreamUserClient")
     (iokit-user-client-class "IOHIDParamUserClient")
     (iokit-user-client-class "IOAudioControlUserClient")
     (iokit-user-client-class "IOAudioEngineUserClient")
     (iokit-user-client-class "AudioAUUC"))
 
 (allow iokit-open
+    (iokit-user-client-class "AppleUpstreamUserClient")
     (iokit-user-client-class "RootDomainUserClient") ;; Needed by WebCore::PerformanceMonitor
 )