Cherry-pick 81941f6. rdar://problem/101888960

    Initially allow syscall mach in sandbox v2
    https://bugs.webkit.org/show_bug.cgi?id=247402
    rdar://101888960

    Reviewed by Tim Nguyen.

    Initially allow syscall mach in sandbox v2, since it was allowed in v1. Individual sandboxes will deny mach syscalls.

    * Source/WebKit/Shared/Sandbox/macOS/common.sb:

    Canonical link: https://commits.webkit.org/256265@main

Canonical link: https://commits.webkit.org/256138.13@safari-7615.1.12-branch

Source/WebKit/Shared/Sandbox/macOS/common.sb

@@ -38,6 +38,7 @@
 (allow file-map-executable (with telemetry))
 (allow iokit-open-service (with telemetry))
 (allow system-mac-syscall (with telemetry))
+(allow syscall-mach)
 
 (with-filter (mac-policy-name "Sandbox")
     (allow system-mac-syscall (mac-syscall-number 2 4 6 7)))