gecko-dev/security
Alex Gaynor 106fa9d993 Bug 1405088 - Part 1 - remove file-write permissions from macOS content temporary directory; r=haik
With this change, the macOS content sandbox has no ability to create files
anywhere on disk (in release builds). If the content process needs a file to
write to, it needs to obtain a file descriptor from the parent process.

MozReview-Commit-ID: 7LoG1PW0UDR

--HG--
extra : rebase_source : 4ac0a7f187d45c9b6c0f8a658edfdae0509054ac
2017-10-02 10:48:01 -04:00
..
apps bug 1421084 - part 3/4 - remove nsNSSShutDownObject::shutdown and virtualDestroyNSSReference r=mt,ttaubert 2018-01-24 14:29:08 -08:00
certverifier Bug 785440 - Disable warning C4324 when building security/certverifier. r=keeler 2018-02-11 00:32:14 -05:00
manager bug 1231203 - ensure OCSP responses to requests from private contexts aren't cached on disk r=jcj 2018-02-08 17:16:03 -08:00
nss Bug 1432177 - land NSS 1b20549e1075 UPGRADE_NSS_RELEASE, r=me 2018-01-29 12:28:20 +01:00
pkix bug 1430906 - don't hold around a test key forever in mozilla::pkix gtests r=franziskus 2018-01-12 13:57:51 -08:00
sandbox Bug 1405088 - Part 1 - remove file-write permissions from macOS content temporary directory; r=haik 2017-10-02 10:48:01 -04:00
.eslintrc.js Bug 1392119 - Enable the ESLint no-caller rule across mozilla-central r=standard8 2017-08-23 13:38:24 +01:00
generate_certdata.py Bug 1402012 - Update buildconfig.py to use PartialConfigEnvironment; r=glandium 2017-08-24 22:52:01 -04:00
generate_mapfile.py
moz.build Bug 1394734 - Simplify various corner cases r=glandium 2017-12-07 22:10:19 +01:00
nss.symbols bug 1430906 - don't hold around a test key forever in mozilla::pkix gtests r=franziskus 2018-01-12 13:57:51 -08:00