Bug 243056

Summary:	Remove inclusion of dyld related system sandbox
Product:	WebKit	Reporter:	Per Arne Vollan <pvollan>
Component:	WebKit Misc.	Assignee:	Per Arne Vollan <pvollan>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	gavin.p, mazander, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	Safari 15
Hardware:	Unspecified
OS:	Unspecified

Per Arne Vollan

Reported 2022-07-21 08:01:31 PDT

Remove inclusion of dyld related system sandbox in WebKit sandboxes. Including system sandboxes can lead to sandbox regressions when these are changed. IAlso, most of the rules in this sandbox will not be applied, since we deny them later in the WebKit sandboxes. An example of this is the syscalls, which are all denied later in the sandbox before we add a whitelist.

Attachments
Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2022-07-21 08:04:14 PDT

<rdar://problem/97380664>

Per Arne Vollan

Comment 2 2022-07-21 08:06:03 PDT

Pull request: https://github.com/WebKit/WebKit/pull/2617

EWS

Comment 3 2022-07-21 13:22:58 PDT

Committed 252702@main (e242d3a2d59f): <https://commits.webkit.org/252702@main> Reviewed commits have been landed. Closing PR #2617 and removing active labels.

Note You need to log in before you can comment on or make changes to this bug.