[webkit-reviews] review granted: [Bug 205077] [iOS] Deny mach lookup access to content filter service in the WebContent sandbox : [Attachment 385302] Patch

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Dec 10 14:35:38 PST 2019


Brent Fulgham <bfulgham at webkit.org> has granted Per Arne Vollan
<pvollan at apple.com>'s request for review:
Bug 205077: [iOS] Deny mach lookup access to content filter service in the
WebContent sandbox
https://bugs.webkit.org/show_bug.cgi?id=205077

Attachment 385302: Patch

https://bugs.webkit.org/attachment.cgi?id=385302&action=review




--- Comment #3 from Brent Fulgham <bfulgham at webkit.org> ---
Comment on attachment 385302
  --> https://bugs.webkit.org/attachment.cgi?id=385302
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=385302&action=review

Looks good! r=me

>
Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:969
> +	   (global-name "com.apple.iphone.axserver-systemwide" "com.apple.tccd"
"com.apple.AGXCompilerService"
"com.apple.uikit.viewservice.com.apple.WebContentFilter.remoteUI")))

Is there an equivalent process we use on macOS that we could treat the same
way?


More information about the webkit-reviews mailing list