[webkit-changes] [WebKit/WebKit] 3825ca: AX sandbox extensions should only be temporary

[Per Arne Vollan]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 3825caf86797fbc3dd79cf57fecba40ae8887d78
      https://github.com/WebKit/WebKit/commit/3825caf86797fbc3dd79cf57fecba40ae8887d78
  Author: Per Arne Vollan <pvollan at apple.com>
  Date:   2023-11-27 (Mon, 27 Nov 2023)

  Changed paths:
    M Source/WebKit/UIProcess/Cocoa/WebProcessProxyCocoa.mm
    M Source/WebKit/UIProcess/GPU/GPUProcessProxy.cpp
    M Source/WebKit/WebProcess/WebProcess.h
    M Source/WebKit/WebProcess/cocoa/WebProcessCocoa.mm

  Log Message:
  -----------
  AX sandbox extensions should only be temporary
https://bugs.webkit.org/show_bug.cgi?id=265336
rdar://118789026

Reviewed by Brent Fulgham.

The Mach bootstrap sandbox extension created when AX is enabled is only needed when
registering with AX. This patch also contains a drive-by fix for a sandbox violation
seen when testing this change.

* Source/WebKit/UIProcess/Cocoa/WebProcessProxyCocoa.mm:
(WebKit::WebProcessProxy::unblockAccessibilityServerIfNeeded):
* Source/WebKit/UIProcess/GPU/GPUProcessProxy.cpp:
(WebKit::gpuProcessCachesDirectory):
* Source/WebKit/WebProcess/WebProcess.h:
* Source/WebKit/WebProcess/cocoa/WebProcessCocoa.mm:
(WebKit::WebProcess::unblockServicesRequiredByAccessibility):
(WebKit::registerWithAccessibility):

Canonical link: https://commits.webkit.org/271164@main