Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-11-27 14:52:16 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 1916286: Add rule for MountPointManager in AddDeveloperRepoDirToPolicy. r=yjuglaret

Browse Source 
Differential Revision: https://phabricator.services.mozilla.com/D220873
This commit is contained in:
Bob Owen 2024-09-04 12:32:39 +00:00
parent 026210612c
commit 5a64e37692
1 changed files with 19 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp
View File

@ -263,9 +263,25 @@ static void AddDeveloperRepoDirToPolicy(sandbox::TargetPolicy* aPolicy) {
std::replace(repoPath.begin(), repoPath.end(), '/', '\\');
repoPath.append(WSTRING("\\*"));
aPolicy->AddRule(sandbox::TargetPolicy::SUBSYS_FILES,
auto result = aPolicy->AddRule(sandbox::TargetPolicy::SUBSYS_FILES,
sandbox::TargetPolicy::FILES_ALLOW_READONLY,
repoPath.c_str());
if (result != sandbox::SBOX_ALL_OK) {
NS_ERROR("Failed to add rule for developer repo dir.");
LOG_E("Failed (ResultCode %d) to add read access to developer repo dir",
result);
}
// The following is required if the process is using a USER_RESTRICTED or
// lower access token level.
result = aPolicy->AddRule(sandbox::TargetPolicy::SUBSYS_FILES,
sandbox::TargetPolicy::FILES_ALLOW_READONLY,
L"\\??\\MountPointManager");
if (result != sandbox::SBOX_ALL_OK) {
NS_ERROR("Failed to add rule for MountPointManager.");
LOG_E("Failed (ResultCode %d) to add read access to MountPointManager",
result);
}
}
#undef WSTRING