gecko-dev

Граф коммитов

Автор	SHA1	Сообщение	Дата
Jed Davis	b7a032eb04	Bug 1004011 - Support SECCOMP_FILTER_FLAG_TSYNC if available. r=kang --HG-- extra : rebase_source : 32be610d889fedb518e062a4a416331be21378d3	2015-08-11 16:30:00 -04:00
Jed Davis	06998bb825	Bug 1162965 - Use /dev/shm instead of /tmp for sandbox chroot if possible. r=kang	2015-05-14 16:19:08 -07:00
Jed Davis	ba1cc023b7	Bug 1151607 - Step 2: Apply net/ipc namespace separation and chroot to media plugins. r=kang This needs more unit tests for the various pieces of what's going on here (LinuxCapabilities, SandboxChroot, UnshareUserNamespace()) but that's nontrivial due to needing a single-threaded process -- and currently they can't be run on Mozilla's CI anyway due to needing user namespaces, and local testing can just try using GMP and manually inspecting the child process. So that will be a followup.	2015-04-10 18:05:19 -07:00

Автор

SHA1

Сообщение

Дата

Jed Davis

b7a032eb04

Bug 1004011 - Support SECCOMP_FILTER_FLAG_TSYNC if available. r=kang

--HG--
extra : rebase_source : 32be610d889fedb518e062a4a416331be21378d3

2015-08-11 16:30:00 -04:00

Jed Davis

06998bb825

Bug 1162965 - Use /dev/shm instead of /tmp for sandbox chroot if possible. r=kang

2015-05-14 16:19:08 -07:00

Jed Davis

ba1cc023b7

Bug 1151607 - Step 2: Apply net/ipc namespace separation and chroot to media plugins. r=kang

This needs more unit tests for the various pieces of what's going on
here (LinuxCapabilities, SandboxChroot, UnshareUserNamespace()) but
that's nontrivial due to needing a single-threaded process -- and
currently they can't be run on Mozilla's CI anyway due to needing user
namespaces, and local testing can just try using GMP and manually
inspecting the child process.  So that will be a followup.

2015-04-10 18:05:19 -07:00

3 Коммитов