gecko-dev/security
Alex Gaynor f514ff97b3 Bug 1379182 - Remove some unnecessary file-write permissions types from the content process on macOS; r=haik
On macOS, the file-write* permission type contains numerous sub-permissions (see
bug for full listing). Restrict the ones we allow to only the two we need:
file-write-create and file-write-data. This primarily reduces kernel attack
surface, I'm not aware of any bad things that could be done directly with the
removed permissions.

MozReview-Commit-ID: 3VvjFesy2qx

--HG--
extra : rebase_source : 934ec17c44c9ef3d7fab29919d66cf1a55d57697
2017-07-07 11:05:01 -04:00
..
apps Bug 1372453 - Part 2: Name the caller of ProxyReleaseEvent. r=billm 2017-06-14 09:27:17 +08:00
certverifier Bug 1376638 - Minimize uses of prmem.h. r=glandium. 2017-06-30 19:05:41 -07:00
manager No bug, Automated HPKP preload list update from host bld-linux64-spot-308 - a=hpkp-update 2017-07-09 09:02:40 -07:00
nss Bug 1370890 - land NSS 825e5d444e99 UPGRADE_NSS_RELEASE, r=me 2017-07-03 10:18:45 +02:00
pkix Bug 1369806: Fix up pkix test to correctly pass zero to CreateEncodedBasicConstraints (which takes a pointer-to-long, rather than a long). r=keeler 2017-06-02 13:21:53 -07:00
sandbox Bug 1379182 - Remove some unnecessary file-write permissions types from the content process on macOS; r=haik 2017-07-07 11:05:01 -04:00
.eslintrc.js Bug 1374670 - Enabled the ESLint no-tabs rule across mozilla-central r=standard8 2017-07-04 21:30:18 +05:30
generate_certdata.py Bug 1345368 - adapt to new NSS certdata.py, r=ted 2017-06-06 09:59:42 +02:00
generate_mapfile.py Bug 1350362 Fix NSS Build System for MinGW r=ted 2017-05-12 11:39:00 -05:00
moz.build Bug 1350362 Fix NSS Build System for MinGW r=ted 2017-05-12 11:39:00 -05:00
nss.symbols Bug 1345368 - land NSS 57e38a8407b3, r=me 2017-05-16 17:12:24 +02:00