Title: [286022] trunk/Source/WebKit
Revision
286022
Author
[email protected]
Date
2021-11-18 12:54:55 -0800 (Thu, 18 Nov 2021)

Log Message

[iOS] Block access to unused resources in the Networking process' sandbox
https://bugs.webkit.org/show_bug.cgi?id=233129
<rdar://problem/85411927>

Unreviewed, fix sandbox syntax errors.


* Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:

Modified Paths

Diff

Modified: trunk/Source/WebKit/ChangeLog (286021 => 286022)


--- trunk/Source/WebKit/ChangeLog	2021-11-18 20:48:15 UTC (rev 286021)
+++ trunk/Source/WebKit/ChangeLog	2021-11-18 20:54:55 UTC (rev 286022)
@@ -1,3 +1,13 @@
+2021-11-18  Per Arne  <[email protected]>
+
+        [iOS] Block access to unused resources in the Networking process' sandbox
+        https://bugs.webkit.org/show_bug.cgi?id=233129
+        <rdar://problem/85411927>
+
+        Unreviewed, fix sandbox syntax errors.
+        
+        * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+
 2021-11-18  Antoine Quint  <[email protected]>
 
         [Model] add support for getting and setting the camera

Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb (286021 => 286022)


--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb	2021-11-18 20:48:15 UTC (rev 286021)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb	2021-11-18 20:54:55 UTC (rev 286022)
@@ -321,7 +321,7 @@
     (allow file-read*
         (subpath "/usr/lib"
                  "/usr/share"
-                 "/private/var/db/timezone")
+                 "/private/var/db/timezone"
                  "/private/var/preferences/Logging"))
 
     (allow-read-and-issue-generic-extensions
@@ -461,7 +461,7 @@
 
 (deny lsopen)
 
-(deny sysctl*) (with telemetry)
+(deny sysctl* (with telemetry))
 (allow sysctl-read
     (sysctl-name
         "hw.activecpu"
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to