1190030 - [10.11] WebRTC fails sandbox restrictions on 10.11 (deny system-socket)

Status: RESOLVED WORKSFORME

(Core :: Security: Process Sandboxing, defect)

Description

[Markus Stange [:mstange]]

Attachment: sandbox report

Today I installed the current 10.11 Beta 15A178w and noticed frequent content process freezes that took about half a minute each. I then noticed that during this time, the OS X "sandbox" process used a lot of CPU, and profiling it showed that it was symbolicating something. Then I checked the system console and found the message "sandboxd: plugin-container(2706) deny system-socket" with an attached report. So I suppose the generation of this report is what caused the freezes.

Steps to reproduce:
 1. Navigate to https://diafygi.github.io/webrtc-ips/ with e10s.

Actual results:
"deny system-socket" is added to the "All Messages" panel in Console.app.

Expected results:
No error message and no content process freeze.

Comment 1

[Markus Stange [:mstange]]

I thought on the latest Beta, but I was mistaken. I was on Beta 1 and had to update one by one to Beta 5. In Beta 5 I can no longer reproduce this.