[webkit-changes] [WebKit/WebKit] 83206f: [Lockdown mode] Add syscall telemetry

Per Arne Vollan noreply at github.com
Wed Dec 7 01:28:26 PST 2022


  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 83206fb964d8815de27a053a122a07f73e6b6318
      https://github.com/WebKit/WebKit/commit/83206fb964d8815de27a053a122a07f73e6b6318
  Author: Per Arne Vollan <pvollan at apple.com>
  Date:   2022-12-07 (Wed, 07 Dec 2022)

  Changed paths:
    M Source/WebKit/Scripts/process-entitlements.sh
    M Source/WebKit/WebProcess/WebPage/WebPage.cpp
    M Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

  Log Message:
  -----------
  [Lockdown mode] Add syscall telemetry
https://bugs.webkit.org/show_bug.cgi?id=248808
<rdar://problem/103014299>

Reviewed by Brent Fulgham.

Add syscall telemetry in Lockdown mode on macOS. Ideally, we would use a sandbox state variable
to conditionalize the rules, but since there are some issues with combining sandbox state
variables and syscalls, we use an entitlement that is unique in Lockdown mode.

* Source/WebKit/Scripts/process-entitlements.sh:
* Source/WebKit/WebProcess/WebPage/WebPage.cpp:
* Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:

Canonical link: https://commits.webkit.org/257461@main




More information about the webkit-changes mailing list