mirror of
https://github.com/mozilla/gecko-dev.git
synced 2025-02-22 02:09:28 +00:00

Add separate entitlement lists for the parent process, plugin-container, and media-plugin-helper executables. Add a utility entitlement list to use for non-browser executables in developer builds to support debugging. For production codesigning versions, only allow loading of unsigned libraries by the media-plugin-helper executable. Limit most entitlements to the parent process executable. A subsequent fix to taskcluster code will enable the new entitlements. Other executables in the bundle will have no entitlements. Differential Revision: https://phabricator.services.mozilla.com/D187245