Bug 206098

Summary: [iOS] Remove access to 'awd' directories
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit2Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, commit-queue, pvollan, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on: 206095    
Bug Blocks:    
Attachments:
Description Flags
Patch
none
Patch none

Description Brent Fulgham 2020-01-10 14:44:22 PST
Confirm that we no longer touch these directories, then remove them from the sandbox.
Comment 1 Radar WebKit Bug Importer 2020-01-10 14:44:44 PST
<rdar://problem/58491816>
Comment 2 Per Arne Vollan 2020-01-10 15:11:09 PST
Are we also ready to block mach lookup access to awdd?
Comment 3 Brent Fulgham 2020-01-10 15:12:51 PST
(In reply to Per Arne Vollan from comment #2)
> Are we also ready to block mach lookup access to awdd?

That's in Bug 206095. Once we block (in that bug), I suspect we can remove this access. But I didn't want to do it in one patch, because I don't think we've adequately tested the lack of these directory access rules.
Comment 4 Brent Fulgham 2020-01-23 12:14:17 PST
Created attachment 388575 [details]
Patch
Comment 5 Brent Fulgham 2020-01-23 12:16:48 PST
Created attachment 388576 [details]
Patch
Comment 6 Per Arne Vollan 2020-01-23 12:50:52 PST
Comment on attachment 388576 [details]
Patch

R=me.
Comment 7 WebKit Commit Bot 2020-01-23 13:15:00 PST
Comment on attachment 388576 [details]
Patch

Clearing flags on attachment: 388576

Committed r254999: <https://trac.webkit.org/changeset/254999>
Comment 8 WebKit Commit Bot 2020-01-23 13:15:01 PST
All reviewed patches have been landed.  Closing bug.