[webkit-changes] [WebKit/WebKit] c9647a: [Cocoa] Remove permissions for SYS_setsockopt from...

[Brent Fulgham]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: c9647ae53c5d528fc86cb2a37905683ccb7b0422
      https://github.com/WebKit/WebKit/commit/c9647ae53c5d528fc86cb2a37905683ccb7b0422
  Author: Brent Fulgham <bfulgham at apple.com>
  Date:   2023-11-28 (Tue, 28 Nov 2023)

  Changed paths:
    M Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in
    M Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

  Log Message:
  -----------
  [Cocoa] Remove permissions for SYS_setsockopt from the WebContent process
https://bugs.webkit.org/show_bug.cgi?id=265413
<rdar://107933292>

Reviewed by Per Arne Vollan.

We needed to keep access to `setsockopt` in the WebContent process until Content
Filtering had completely moved to the Network process. That happened in macOS 13,
so we should be able to remove this ability for Ventura and newer operating systems.
All iOS ports have made this transition already, so no version checks are needed there.

* Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
* Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:

Canonical link: https://commits.webkit.org/271239@main