security/sandbox/linux/SandboxFilter.cpp
11f1649bd31a1696dcf5fb27c0ca6badb0e446dd
created 2014-10-16 12:42 +0200
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1080165 - Allow setpriority() to fail without crashing in media plugins on Linux. r=kang
afeff2d265bdf1d9b27284de44b6185082691f91
created 2014-10-03 14:55 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1068410 - Convert remote crash dump to use pipe instead of socketpair in the child. r=kang r=ted
36cf6a98d663a59eb03043e62527b120fc876e1d
created 2014-08-04 15:11 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1047620 - Fix sandboxing for B2G --disable-jemalloc builds. r=kang
b60e4395f1413e062b19e22dd16da68983719219
created 2014-08-04 15:11 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1012951 - Add Linux sandboxing for GeckoMediaPlugin processes. r=kang r=ted
d78784f732eb181c05e0c8759fe959e2bcf7ff49
created 2014-08-04 15:11 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1046541 - Use stdio for non-Android Linux sandbox error messages. r=kang
9a9d70cf22246fc0555b72ddb9acce2cdf207411
created 2014-08-01 15:05 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1046525 - Allow get{e,}gid and sched_{g,s}etparam in sandboxed content processes. r=kang
99e1f3c50a12775a3f59843cc60b9febc3e0785e
created 2014-07-30 16:49 +0100
pushed 2014-10-20 17:29 +0000
Ed Morley Ed Morley - Backed out changeset d50d7e88f35e (bug 1012951) for LSan failures
d50d7e88f35eecb6c657467a179f64a47cd0c3c6
created 2014-07-29 15:31 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1012951 - Sandbox GMP plugins on Linux using seccomp-bpf. r=kang r=ted
c361be2aeb66ec71289f34a5edfcc7a2527afbf8
created 2014-07-17 14:57 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1037211 - Remove MOZ_CONTENT_SANDBOX_REPORTER by making it always true. r=kang r=ted
39ee921a5b2f66fec3dfc260274650e2a79db287
created 2014-07-14 18:35 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1038490 - Fix misuse of MOZ_WIDGET_GONK in Linux content process sandbox policy. r=kang
3ea86a380019d51722b0c38c3206e5b0958b0567
created 2014-07-09 16:52 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1038486 - Fix Linux desktop seccomp sandbox build on 32-bit x86. r=kang
78ebcfff12347b6cd921ddb8d240a89912b106d3
created 2014-07-10 17:37 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1035786 - Avoid warning-as-error sandbox build failure with an explicit cast. r=gdestuynder
89e48a42e8a560df6e083329906c5f0950e7f5b9
created 2014-06-02 14:52 +0200
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1014299 - Add times() to seccomp whitelist. r=kang
179363be564197fc8907d08823bd06609257ece4
created 2014-05-20 18:38 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 920372 - Fix socketcall whitelisting on i386. r=kang
2adbb2797d8b4add9ad4db27090d7f6b26d6a3ee
created 2014-05-20 18:38 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 920372 - Allow tgkill only for threads of the calling process itself. r=kang
b56d5602d0cdcc7f06a82538e52fde16aa0d84a3
created 2014-05-20 18:37 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 920372 - Use Chromium seccomp-bpf compiler to dynamically build sandbox program. r=kang
0c567eac263556a4103ac7d50aec0b1d5df5fd2c
created 2014-05-02 16:57 +0200
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 1004832 - Add tgkill to seccomp-bpf whitelist. r=kang
dc0586595f8039894a875654a18e54c85e88df1c
created 2014-04-17 16:23 -0400
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 997409 - Add set_thread_area to seccomp whitelist if available. r=kang
aac74f0bcfbffa5c7da6cd011969d2d75100f065
created 2014-04-11 13:09 +0200
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 981949 - Whitelist ftruncate for seccomp-bpf sandboxing. r=kang
47cbfabd27b4bb316b914c00facf356a29529f42
created 2014-03-28 17:58 -0700
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 989172 - Re-add sigaltstack to seccomp whitelist. r=kang
d380f713c721a7020886c6b00284d206d0c7fefb
created 2014-03-20 10:19 -0400
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 985227 - Part 3: Replace the seccomp filter arch ifdefs with syscall existence tests. r=kang
679ac1f215d8a51477ef135a3a751dc7d43a9a14
created 2014-03-20 10:19 -0400
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 985227 - Part 2: Flatten out the #define maze in the seccomp filter. r=kang
1e4e7d7e184bc86c7781f42b6bed69228333d8c0
created 2014-03-20 10:19 -0400| base
pushed 2014-10-20 17:29 +0000
Jed Davis Jed Davis - Bug 985227 - Part 1: Move the seccomp filter into its own translation unit. r=kang
less more (0) tip