gecko-dev/security
Jed Davis 09db14abce Bug 1439057 - Tighten /dev/shm access in Linux content sandbox policy. r=gcp
This patch uses the shared memory name prefixes introduced in bug 1447867
to prevent access to /dev/shm files of other applications or other
processes within the same browser instance.

When a shared memory implementation that doesn't use shm_open is available
(specifically, the memfd_create support to be added in bug 1440203),
/dev/shm access is completely denied.

MozReview-Commit-ID: L2ylG5KrXTU
2018-07-31 10:41:29 -06:00
..
apps Bug 1464869 - Run autopep8 on security/ r=fkiefer 2018-05-26 06:47:27 -07:00
certverifier Bug 1470985 - s/PodEqual/ArrayEqual/ from ArrayUtils.h. - r=waldo 2018-07-27 14:11:18 -07:00
manager bug 1475084 - add tests for tampered COSE signatures in add-ons r=dveditz 2018-07-30 21:48:53 +00:00
nss Bug 1470914, NSS 3.39 beta revision be5c5d3ad5f6 UPGRADE_NSS_RELEASE r=me 2018-07-27 15:08:55 +02:00
pkix Bug 1476486 - Apply clang warning suppression (rather than msvc) in pkix for clang-cl. r=froydnj 2018-07-19 11:19:52 +10:00
sandbox Bug 1439057 - Tighten /dev/shm access in Linux content sandbox policy. r=gcp 2018-07-31 10:41:29 -06:00
.eslintrc.js
generate_certdata.py Bug 1464869 - Run autopep8 on security/ r=fkiefer 2018-05-26 06:47:27 -07:00
generate_mapfile.py
moz.build Bug 1445763 - Update moz.build meta data with "Firefox Build System". r=froydnj 2018-03-14 21:44:46 +01:00
nss.symbols Bug 1464828 - DAR API with libsecret and NSS back-end, r=keeler,m_and_m,froydnj 2018-07-26 16:05:35 +02:00