[webkit-changes] [WebKit/WebKit] 567434: [macOS] Block IOKit in WebContent process based on...

[Per Arne Vollan]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 567434310c5b08d0f80d15f5ae73e1495e0e6d1e
      https://github.com/WebKit/WebKit/commit/567434310c5b08d0f80d15f5ae73e1495e0e6d1e
  Author: Per Arne Vollan <pvollan at apple.com>
  Date:   2022-10-18 (Tue, 18 Oct 2022)

  Changed paths:
    M Source/WebKit/WebProcess/WebPage/WebPage.cpp
    M Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

  Log Message:
  -----------
  [macOS] Block IOKit in WebContent process based on setting
https://bugs.webkit.org/show_bug.cgi?id=246370
rdar://101053348

Reviewed by Chris Dumez.

Make the IOKit sandbox blocking work in the WebContent process on macOS. Also, this patch sets the sandbox state variable
earlier, in order to avoid opening IOKit connections before setting the variable.

* Source/WebKit/WebProcess/WebPage/WebPage.cpp:
* Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:

Canonical link: https://commits.webkit.org/255697@main