[Webkit-unassigned] [Bug 169306] New: [Mac][WK2] Whitelist sysctl-read

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=169306

            Bug ID: 169306
           Summary: [Mac][WK2] Whitelist sysctl-read
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: All
                OS: macOS 10.12
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit2
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: bfulgham at webkit.org

We only have a small number of cases where we use sysctl in WebKit, and those cases are always in a read-only mode.

Modify our sandboxes to limit 'sysctl' use to read-only, and whitelist that access for the very small number of cases we actually use:

CTL_KERN, KERN_PROC. KERN_PROC_PID, #
CTL_HW, HW_AVAILCPU
CTL_HW, HW_NCPU
hw.model
kern.memorystatus_level

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170307/73098cef/attachment.html>