1386291 - Remove access to com.apple.DesktopServicesHelper mach service

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, enhancement, P1)

Description

[Alex Gaynor [:Alex_Gaynor]]

From researching it, it appears to be used by finder -- none of macOS sandbox profiles that ship with the OS have access to it.

In local testing I couldn't find any way to trigger access to it.

Comment 1

[Alex Gaynor [:Alex_Gaynor]]

https://treeherder.mozilla.org/#/jobs?repo=try&revision=9646437c9e16a5e2ac25ea694e96dad22ba4a4e7

Comment 2

[Alex Gaynor [:Alex_Gaynor]]

Attachment: Bug 1386291 - remove access to the com.apple.DesktopServicesHelper mach service in content processes;

Review commit: https://reviewboard.mozilla.org/r/164494/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/164494/

Comment 3

[Haik Aftandilian [:haik]]

Comment on attachment 8893384 [details]
Bug 1386291 - remove access to the com.apple.DesktopServicesHelper mach service in content processes;

https://reviewboard.mozilla.org/r/164494/#review169928

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/7b42e0eb696b
remove access to the com.apple.DesktopServicesHelper mach service in content processes; r=haik

Comment 5

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

https://hg.mozilla.org/mozilla-central/rev/7b42e0eb696b