[webkit-changes] [WebKit/WebKit] 129d76: Upgrade to sandbox version 3 on iOS and macOS

[Per Arne Vollan]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 129d7629be7ded74ee0c924c96c48c1d0372d61d
      https://github.com/WebKit/WebKit/commit/129d7629be7ded74ee0c924c96c48c1d0372d61d
  Author: Per Arne Vollan <pvollan at apple.com>
  Date:   2022-12-01 (Thu, 01 Dec 2022)

  Changed paths:
    M Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in
    M Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in
    M Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.GPU.sb.in
    M Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.in
    M Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in
    A Source/WebKit/Shared/Sandbox/common.sb
    A Source/WebKit/Shared/Sandbox/iOS/common.sb
    M Source/WebKit/Shared/Sandbox/macOS/common.sb
    A Source/WebKit/Shared/Sandbox/util.sb
    M Source/WebKit/WebKit.xcodeproj/project.pbxproj
    M Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

  Log Message:
  -----------
  Upgrade to sandbox version 3 on iOS and macOS
https://bugs.webkit.org/show_bug.cgi?id=248399
rdar://102719029

Reviewed by Brent Fulgham.

Upgrade to sandbox version 3 on iOS and macOS. This patch should not introduce any behavior change, since
the resources with implicit access in version 1 has been explicitly allowed. Also, this patch adds more
sandbox include files to be able to share common rules.

* Source/WebKit/GPUProcess/mac/com.apple.WebKit.GPUProcess.sb.in:
* Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
* Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
* Source/WebKit/Shared/Sandbox/iOS/common.sb
* Source/WebKit/Shared/Sandbox/macOS/common.sb:
* Source/WebKit/Shared/Sandbox/util.sb
* Source/WebKit/WebKit.xcodeproj/project.pbxproj:
* Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:

Canonical link: https://commits.webkit.org/257272@main