gecko-dev/security/sandbox
Jed Davis 9c23d852e1 Bug 1639181 - Allow a safe subset of fd flag fcntls in the common sandbox policy. r=gcp
Content processes allow a restricted subset of F_{GET,SET}{FD,FL} that
prevents setting unknown or known-unsafe flags, which was copied to the
socket process policy; this patch moves it to the common policy and
removes RDD's copy of GMP's override.

The immediate reason for this is DMD using F_GETFL via fdopen to use a
file descriptor passed over IPC, but in general this should be safe and
it's a reasonable thing to expect to be able to use.

Differential Revision: https://phabricator.services.mozilla.com/D77379
2020-05-29 18:18:43 +00:00
..
chromium Bug 1557282 Part 1: Take chromium commit c1ce57ea5d31208af589b4839390a44ab20b0c8f. r=handyman,gcp 2020-03-12 20:39:40 +00:00
chromium-shim Bug 1615401 - Part 2: Keep Chromium's file_version_info_win.cpp updated r=bobowen 2020-03-06 22:24:01 +02:00
common Bug 1613985 - Use default for equivalent-to-default constructors/destructors in security. r=rrelyea 2020-03-16 10:56:56 +00:00
linux Bug 1639181 - Allow a safe subset of fd flag fcntls in the common sandbox policy. r=gcp 2020-05-29 18:18:43 +00:00
mac Bug 1614983 - Create a new sandbox profile for the socket process r=spohl 2020-03-11 22:20:13 +00:00
test Bug 1620542 - Automatically fix ESLint errors in .eslintrc.js files. r=mossop 2020-03-07 10:09:44 +00:00
win Bug 1630281 - Cache the executable's IAT for ntdll.dll before COM initialization. r=mhowell 2020-04-30 18:26:18 +00:00
moz.build Bug 1615401 - Part 1: Partially implement FileVersionInfoWin to use from OSInfo::Kernel32BaseVersion(). r=bobowen 2020-03-06 18:51:54 +02:00