Bug 205421

Summary: Deny mach lookup access to "com.apple.pluginkit.pkd" in the WebContent process
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit2Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: achristensen, bfulgham, commit-queue, ggaren, pvollan, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
none
Patch none

Brent Fulgham
Reported 2019-12-18 15:11:15 PST
Testing, telemetry, and code review indicate that we do not need access to 'com.apple.pluginkit.pkd' in the WebContent process. We should remove this permission.
Attachments
Patch (1.52 KB, patch)
2019-12-18 15:14 PST, Brent Fulgham 		no flags
DetailsFormatted DiffDiff
Patch (4.01 KB, patch)
2019-12-18 17:17 PST, Brent Fulgham 		no flags
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Brent Fulgham
Comment 1 2019-12-18 15:11:24 PST
<rdar://problem/56995585>
Brent Fulgham
Comment 2 2019-12-18 15:14:16 PST
Created attachment 386016 [details] Patch
Brent Fulgham
Comment 3 2019-12-18 17:17:57 PST
Created attachment 386038 [details] Patch
Per Arne Vollan
Comment 4 2019-12-19 06:43:52 PST
Comment on attachment 386038 [details] Patch Great! R=me.
Per Arne Vollan
Comment 5 2019-12-19 06:48:53 PST
The iOS test failures seems unrelated.
WebKit Commit Bot
Comment 6 2019-12-19 10:32:29 PST
The commit-queue encountered the following flaky tests while processing attachment 386038 [details]: imported/w3c/web-platform-tests/IndexedDB/interleaved-cursors-small.html bug 203433 The commit-queue is continuing to process your patch.
WebKit Commit Bot
Comment 7 2019-12-19 10:33:19 PST
Comment on attachment 386038 [details] Patch Clearing flags on attachment: 386038 Committed r253766: <https://trac.webkit.org/changeset/253766>
WebKit Commit Bot
Comment 8 2019-12-19 10:33:20 PST
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.