1387233 - [mac] restrict ipc-posix-shm permissions in content

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, enhancement)

Description

[Alex Gaynor [:Alex_Gaynor]]

We currently allow ipc-posix-shm* on 

      (ipc-posix-name-regex "^/tmp/com.apple.csseed:")
      (ipc-posix-name-regex "^CFPBS:"))
      (ipc-posix-name-regex "^AudioIO")

ipc-posix-shm* is made up of:

ipc-posix-shm-read-data
ipc-posix-shm-read-metadata
ipc-posix-shm-write-create
ipc-posix-shm-write-data
ipc-posix-shm-write-unlink

I suspect at a minimum we can remove create and unlink. Some of these might also be either read-only or write-only.

Requires research and investigation. (Also I have no idea what CFPBS or csseed are).

Comment 1

[Alex Gaynor [:Alex_Gaynor]]

Try run for a basic simplification looks ok: https://treeherder.mozilla.org/#/jobs?repo=try&revision=7e55a189c05ee416264c6ebe9bc4330fac40d940

Comment 2

[Alex Gaynor [:Alex_Gaynor]]

Attachment: Bug 1387233 - restrict access to ipc-posix-shm APIs in the content process;

This removes /tmp/com.apple.csseed access entirely, ipc-posix-shm-read-metadata
from CFPBS:, and ipc-posix-shm-write-{create,unlink} from AudioIO and CFPBS:.

Review commit: https://reviewboard.mozilla.org/r/165684/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/165684/

Comment 3

[Haik Aftandilian [:haik]]

Comment on attachment 8894509 [details]
Bug 1387233 - restrict access to ipc-posix-shm APIs in the content process;

https://reviewboard.mozilla.org/r/165684/#review170774

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/cb06d162a3d0
restrict access to ipc-posix-shm APIs in the content process; r=haik

Comment 5

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/cb06d162a3d0