Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-11-25 05:41:12 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 1676999 - P1. Remove preference. r=bobowen

Browse Source 
The RDD process can no longer work without having access to win32k ; enabling this pref would lead to a crash on Nightly and failure to work elsewhere.

Differential Revision: https://phabricator.services.mozilla.com/D97753
This commit is contained in:
Jean-Yves Avenard 2020-11-20 17:22:51 +00:00
parent 85b84f8248
commit 1ec040c4a0
2 changed files with 0 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
modules/libpref/init/StaticPrefList.yaml
View File

@ -9559,13 +9559,6 @@
value: false
mirror: always
# Controls whether we disable win32k for the processes.
# true means that win32k system calls are not permitted.
- name: security.sandbox.rdd.win32k-disable
type: RelaxedAtomicBool
value: false
mirror: always
# Note: win32k is currently _not_ disabled for GMP due to intermittent test
# failures, where the GMP process fails very early. See bug 1449348.
- name: security.sandbox.gmp.win32k-disable

5
security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp
View File

@ -977,11 +977,6 @@ bool SandboxBroker::SetSecurityLevelForRDDProcess() {
SANDBOX_ENSURE_SUCCESS(result, "Failed to initialize signed policy rules.");
}
if (StaticPrefs::security_sandbox_rdd_win32k_disable()) {
result = AddWin32kLockdownPolicy(mPolicy, false);
SANDBOX_ENSURE_SUCCESS(result, "Failed to add the win32k lockdown policy");
}
mitigations = sandbox::MITIGATION_STRICT_HANDLE_CHECKS |
sandbox::MITIGATION_DLL_SEARCH_ORDER;