[webkit-reviews] review granted: [Bug 221336] [macOS] Remove access to com.apple.cvmsServ : [Attachment 419148] Patch

[bugzilla-daemon at webkit.org]

Brent Fulgham <bfulgham at webkit.org> has granted Per Arne Vollan
<pvollan at apple.com>'s request for review:
Bug 221336: [macOS] Remove access to com.apple.cvmsServ
https://bugs.webkit.org/show_bug.cgi?id=221336

Attachment 419148: Patch

https://bugs.webkit.org/attachment.cgi?id=419148&action=review




--- Comment #4 from Brent Fulgham <bfulgham at webkit.org> ---
Comment on attachment 419148
  --> https://bugs.webkit.org/attachment.cgi?id=419148
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=419148&action=review

r=me

>> Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:118
>> +	(deny mach-lookup
> 
> Is this safe to do on older OS? Should we move the precompile checks around
this so we deny on 11+, but allow on older systems?

Oh! never mind. I see that this is only when the service is not extended.