[macOS] Deny mach-lookup to the service 'com.apple.SystemConfiguration.configd' in the WebContent process

pvollan · pvollan · commit c55acc880d97 · 2020-12-10T22:56:33.000Z
https://bugs.webkit.org/show_bug.cgi?id=219680 <rdar://problem/69019138> Reviewed by Brent Fulgham. Deny mach-lookup to the service 'com.apple.SystemConfiguration.configd' in the WebContent process on macOS, since there are no reports of this being used. No new tests, since the result will depend on macOS version. * WebProcess/com.apple.WebProcess.sb.in: Canonical link: https://commits.webkit.org/232322@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@270658 268f45cc-cd09-0410-ab3c-d52691b4dbfc
diff --git a/Source/WebKit/ChangeLog b/Source/WebKit/ChangeLog
@@ -1,3 +1,18 @@
+2020-12-10  Per Arne Vollan  <pvollan@apple.com>
+
+        [macOS] Deny mach-lookup to the service 'com.apple.SystemConfiguration.configd' in the WebContent process
+        https://bugs.webkit.org/show_bug.cgi?id=219680
+        <rdar://problem/69019138>
+
+        Reviewed by Brent Fulgham.
+
+        Deny mach-lookup to the service 'com.apple.SystemConfiguration.configd' in the WebContent process on macOS,
+        since there are no reports of this being used.
+
+        No new tests, since the result will depend on macOS version.
+
+        * WebProcess/com.apple.WebProcess.sb.in:
+
 2020-12-10  Per Arne Vollan  <pvollan@apple.com>
 
         [macOS] Create sandbox extension for AppleAVDUserClient when Media in GPU process is not enabled
diff --git a/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in b/Source/WebKit/WebProcess/com.apple.WebProcess.sb.in
@@ -986,9 +986,9 @@
 #if __MAC_OS_X_VERSION_MIN_REQUIRED >= 110000
     (with report) (with telemetry-backtrace)
 #endif
-    (global-name "com.apple.SystemConfiguration.configd")
 #if __MAC_OS_X_VERSION_MIN_REQUIRED <= 110000
     (global-name "com.apple.PowerManagement.control")
+    (global-name "com.apple.SystemConfiguration.configd")
     (global-name "com.apple.assertiond.processassertionconnection")
 #endif
     (global-name "com.apple.fonts")
