gecko-dev/toolkit/system
Jed Davis e4f2d0dce9 Bug 1382442 - Don't try to use GConf in content processes. r=drno,gcp
GConf uses ORBit, which tries to create server sockets, which has been
disallowed by the content sandbox seccomp-bpf policy since 55 (bug
1358647).  GConf is considered obsolete and hasn't been updated since
2013.  This patch disables the use of GConf in content processes, on the
assumption that anything that this would break is already broken by
rejecting the system call.

The one use case that's believed to be broken is using WebRTC behind a
mandatory proxy and using system preferences (rather than Firefox's) for
the proxy config.  WebRTC uses nsIProtocolProxyService in the content
process, so if this combination of things is done on a system with GConf,
it will not be able to read the system prefs.

The larger use case of WebRTC + GConf (with or without a proxy) will
crash on Nightly without this patch, because rejected syscalls produce
crashes in order to gather more diagnostic information.

MozReview-Commit-ID: 6jpBkByzo7n

--HG--
extra : rebase_source : 54f28163b78593d25b7a52897162f20e9042bcfe
2017-08-16 10:11:15 -06:00
..
androidproxy Bug 1351067 - add BUG_COMPONENT to toolkit/* files. r=myk,enndeakin,mossop 2017-04-09 05:43:43 -04:00
gnome Bug 1382442 - Don't try to use GConf in content processes. r=drno,gcp 2017-08-16 10:11:15 -06:00
osxproxy Bug 1351067 - add BUG_COMPONENT to toolkit/* files. r=myk,enndeakin,mossop 2017-04-09 05:43:43 -04:00
unixproxy Bug 1378712 - Remove all trailing whitespaces r=Ehsan 2017-07-06 14:00:35 +02:00
windowsproxy Bug 1375392 - Tweak the PROFILER_LABEL* macros. r=mstange. 2017-06-22 17:08:53 +10:00