Skip to content
Permalink
Browse files
[iOS] WebContent captive portal XPC service needs entitlement to set …
…sandbox state variables

https://bugs.webkit.org/show_bug.cgi?id=240921

Reviewed by Geoffrey Garen.

This patch also adds a function for the shared WebContent entitlements on iOS.

* Source/WebKit/Scripts/process-entitlements.sh:

Canonical link: https://commits.webkit.org/250976@main
git-svn-id: https://svn.webkit.org/repository/webkit/trunk@294824 268f45cc-cd09-0410-ab3c-d52691b4dbfc
  • Loading branch information
pvollan committed May 25, 2022
1 parent d207ab7 commit 2ec4b744e3ae6b54b4faad3eceb31520990307f4
Showing 1 changed file with 10 additions and 28 deletions.
@@ -307,7 +307,7 @@ function maccatalyst_process_network_entitlements()
# iOS Family entitlements
# ========================================

function ios_family_process_webcontent_entitlements()
function ios_family_process_webcontent_shared_entitlements()
{
plistbuddy Add :com.apple.QuartzCore.secure-mode bool YES
plistbuddy Add :com.apple.QuartzCore.webkit-end-points bool YES
@@ -322,56 +322,38 @@ function ios_family_process_webcontent_entitlements()
plistbuddy Add :com.apple.private.memorystatus bool YES
plistbuddy Add :com.apple.private.network.socket-delegate bool YES
plistbuddy Add :com.apple.private.pac.exception bool YES
plistbuddy Add :com.apple.private.verified-jit bool YES
plistbuddy Add :com.apple.private.security.message-filter bool YES
plistbuddy Add :com.apple.private.security.mutable-state-flags array
plistbuddy Add :com.apple.private.security.mutable-state-flags:0 string EnableMachBootstrap
plistbuddy Add :com.apple.private.webinspector.allow-remote-inspection bool YES
plistbuddy Add :com.apple.private.webinspector.proxy-application bool YES
plistbuddy Add :com.apple.private.webkit.use-xpc-endpoint bool YES
plistbuddy Add :com.apple.runningboard.assertions.webkit bool YES
plistbuddy Add :dynamic-codesigning bool YES

plistbuddy Add :com.apple.tcc.delegated-services array
plistbuddy Add :com.apple.tcc.delegated-services:0 string kTCCServiceCamera
plistbuddy Add :com.apple.tcc.delegated-services:1 string kTCCServiceMicrophone

plistbuddy Add :com.apple.private.sandbox.profile string com.apple.WebKit.WebContent
}

function ios_family_process_webcontent_entitlements()
{
plistbuddy Add :com.apple.private.verified-jit bool YES
plistbuddy Add :dynamic-codesigning bool YES

ios_family_process_webcontent_shared_entitlements
}

function ios_family_process_webcontent_captiveportal_entitlements()
{
plistbuddy Add :com.apple.QuartzCore.secure-mode bool YES
plistbuddy Add :com.apple.QuartzCore.webkit-end-points bool YES
plistbuddy add :com.apple.QuartzCore.webkit-limited-types bool YES
plistbuddy Add :com.apple.developer.coremedia.allow-alternate-video-decoder-selection bool YES
plistbuddy Add :com.apple.developer.kernel.extended-virtual-addressing bool YES
plistbuddy Add :com.apple.mediaremote.set-playback-state bool YES
plistbuddy Add :com.apple.pac.shared_region_id string WebContent
plistbuddy Add :com.apple.private.allow-explicit-graphics-priority bool YES
plistbuddy Add :com.apple.private.coremedia.extensions.audiorecording.allow bool YES
plistbuddy Add :com.apple.private.coremedia.pidinheritance.allow bool YES
plistbuddy Add :com.apple.private.gpu-restricted bool YES
plistbuddy Add :com.apple.private.memorystatus bool YES
plistbuddy Add :com.apple.private.network.socket-delegate bool YES
plistbuddy Add :com.apple.private.pac.exception bool YES
plistbuddy Add :com.apple.private.security.message-filter bool YES
plistbuddy Add :com.apple.private.webinspector.allow-remote-inspection bool YES
plistbuddy Add :com.apple.private.webinspector.proxy-application bool YES
plistbuddy Add :com.apple.private.webkit.use-xpc-endpoint bool YES
plistbuddy Add :com.apple.runningboard.assertions.webkit bool YES

plistbuddy Add :com.apple.imageio.allowabletypes array
plistbuddy Add :com.apple.imageio.allowabletypes:0 string org.webmproject.webp
plistbuddy Add :com.apple.imageio.allowabletypes:1 string public.jpeg
plistbuddy Add :com.apple.imageio.allowabletypes:2 string public.png
plistbuddy Add :com.apple.imageio.allowabletypes:3 string com.compuserve.gif

plistbuddy Add :com.apple.tcc.delegated-services array
plistbuddy Add :com.apple.tcc.delegated-services:0 string kTCCServiceCamera
plistbuddy Add :com.apple.tcc.delegated-services:1 string kTCCServiceMicrophone

plistbuddy Add :com.apple.private.sandbox.profile string com.apple.WebKit.WebContent
ios_family_process_webcontent_shared_entitlements
}

function ios_family_process_gpu_entitlements()

0 comments on commit 2ec4b74

Please sign in to comment.