[Webkit-unassigned] [Bug 199119] New: Adjust sandboxes based on seed feedback

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=199119

            Bug ID: 199119
           Summary: Adjust sandboxes based on seed feedback
           Product: WebKit
           Version: Safari 10
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: bfulgham at webkit.org

Adjust our process sandboxes based on seed user feedback as follows:

(1) Silence spurious warnings about two XPC services we purposefully block:
    (global-name "com.apple.CoreServices.coreservicesd")
    (global-name "com.apple.DiskArbitration.diskarbitrationd")

(2) Unblock an IOKit property needed for video playback feature detection:
    (iokit-property "compatible")

(3) Allow file-read* access to "/Library/Fonts" in the network process to allow proper font serialization:
    (subpath "/Library/Fonts")

(4) Allow access to the sysctl for "kern.osproductversion", which is needed by LaunchServices to detect some filesystem features.
    "kern.osproductversion"

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190621/65fb71d2/attachment-0001.html>