[Webkit-unassigned] [Bug 180610] New: [iOS] Don't import 'UIKit-apps.sb' to the WebContent process sandbox

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Dec 8 15:08:00 PST 2017


https://bugs.webkit.org/show_bug.cgi?id=180610

            Bug ID: 180610
           Summary: [iOS] Don't import 'UIKit-apps.sb' to the WebContent
                    process sandbox
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit2
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: bfulgham at webkit.org

Currently the WebContent process sandbox includes the global "UIKit-apps.sb" sandbox. We should just duplicate the contents of that file, and remove things we don't use so that we can decrease the range of things our process has access too.

This patch is a first step, which just does a copy/paste of the sandbox rules. There should be no change in function.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20171208/472fd405/attachment-0001.html>


More information about the webkit-unassigned mailing list