Title: [286010] trunk/Source/WebKit
- Revision
- 286010
- Author
- [email protected]
- Date
- 2021-11-18 09:58:57 -0800 (Thu, 18 Nov 2021)
Log Message
[macOS] Block access to unused resources in the Networking process' sandbox
https://bugs.webkit.org/show_bug.cgi?id=233086
<rdar://problem/85376544>
Reviewed by Brent Fulgham.
Follow-up patch, allow access to logging service for root.
* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (286009 => 286010)
--- trunk/Source/WebKit/ChangeLog 2021-11-18 17:45:08 UTC (rev 286009)
+++ trunk/Source/WebKit/ChangeLog 2021-11-18 17:58:57 UTC (rev 286010)
@@ -1,3 +1,15 @@
+2021-11-18 Per Arne Vollan <[email protected]>
+
+ [macOS] Block access to unused resources in the Networking process' sandbox
+ https://bugs.webkit.org/show_bug.cgi?id=233086
+ <rdar://problem/85376544>
+
+ Reviewed by Brent Fulgham.
+
+ Follow-up patch, allow access to logging service for root.
+
+ * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+
2021-11-18 Youenn Fablet <[email protected]>
MediaPlayerAVFoundation should support rvfc
Modified: trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (286009 => 286010)
--- trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in 2021-11-18 17:45:08 UTC (rev 286009)
+++ trunk/Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in 2021-11-18 17:58:57 UTC (rev 286010)
@@ -360,6 +360,10 @@
(literal "/private/var/run/mDNSResponder")
(remote tcp))
+(with-filter (uid 0)
+ (allow mach-lookup
+ (global-name "com.apple.system.logger")))
+
;; FIXME should be removed when <rdar://problem/9347205> + related radar in Safari is fixed
(allow mach-lookup
(global-name "org.h5l.kcm")
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
