[Webkit-unassigned] [Bug 193571] [GTK][WPE] Add API to add paths to sandbox

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=193571

--- Comment #32 from youenn fablet <youennf at gmail.com> ---
(In reply to Patrick Griffis from comment #29)
> (In reply to youenn fablet from comment #28)
> > Comment on attachment 360011 [details]
> > Patch
> > 
> > View in context:
> > https://bugs.webkit.org/attachment.cgi?id=360011&action=review
> > 
> > > Source/WebKit/ChangeLog:4
> > > +        https://bugs.webkit.org/show_bug.cgi?id=193571
> > 
> > Can you describe the use cases for this API?
> > Which folders are to be sandboxed?
> 
> This exposes a public api for users to add custom paths which could be
> anything.

Can you describe what would be this 'anything'?

I would expect WebKit to already know several paths that the WebProcess will use.
For instance, you might know the exact service worker registration directories beforehand.
Should it be used for these?
There are shortcomings of course as Mac/iOS ports often use sandbox extensions.

That leads to the question whether this API is a temporary solution to ease migrating apps to being sandboxed or if it will have more permanent usage.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190124/df9a8a21/attachment.html>