gecko-dev/security/sandbox/linux
Jed Davis 10843a73b7 Bug 1290896 - Allow readlink() in desktop Linux content processes. r=gps
Making readlink() always fail with EINVAL (the result of applying it
to a non-symlink) worked on B2G, but this is not the case on desktop.
(Note: originally the idea for the B2G file broker was that it would
ignore symlinks and map lstat to stat, so that behavior for readlink
would have been consistent, but as eventually implemented it does do
lstat as actual lstat.)

In particular, this seems to be causing something in the graphics
library stack to change what GL renderer it uses (?), and on some
systems the presence of the readlink->EINVAL rule causes it to load a
version of the llvmpipe software renderer with a crash bug, instead of
(we assume) some other driver that works.
2016-08-08 14:59:19 -07:00
..
broker Bug 1288410 - Basic implementation of AddDir and recursive Lookup. r=tedd 2016-08-10 15:09:58 +02:00
common Bug 1288726 - Seccomp sandbox doesn't play well with Valgrind. r=julian.r.hector. 2016-07-29 17:42:55 +02:00
glue
gtest Bug 1288410 - Basic implementation of AddDir and recursive Lookup. r=tedd 2016-08-10 15:09:58 +02:00
LinuxCapabilities.cpp
LinuxCapabilities.h
moz.build Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
Sandbox.cpp Bug 1284674 - Remove NUWA r=cyu 2016-08-02 14:54:00 +02:00
Sandbox.h Bug 1284674 - Remove NUWA r=cyu 2016-08-02 14:54:00 +02:00
SandboxBrokerClient.cpp
SandboxBrokerClient.h
SandboxChroot.cpp
SandboxChroot.h
SandboxFilter.cpp Bug 1290896 - Allow readlink() in desktop Linux content processes. r=gps 2016-08-08 14:59:19 -07:00
SandboxFilter.h
SandboxFilterUtil.cpp Bug 1273852 - Always add seccomp-bpf socketcall dispatcher. r=jld 2016-06-29 20:34:40 +02:00
SandboxFilterUtil.h Backed out changeset 535e23baec4a (bug 1286119) for landing with wrong bugnumber 2016-07-14 13:51:16 +02:00
SandboxHooks.cpp Bug 1274873 - Part 2: Move signal handler set up to SandboxEarlyInit() r=jld 2016-05-26 16:20:44 +02:00
SandboxInternal.h
SandboxLogging.cpp
SandboxLogging.h
SandboxUtil.cpp
SandboxUtil.h