gecko-dev/security
Jed Davis c5a7acdf32 Bug 1439057 - Tighten /dev/shm access in Linux content sandbox policy. r=froydnj,gcp
This patch uses the shared memory name prefixes introduced in bug 1447867
to prevent access to /dev/shm files of other applications or other
processes within the same browser instance.

When a shared memory implementation that doesn't use shm_open is available
(specifically, the memfd_create support to be added in bug 1440203),
/dev/shm access is completely denied.

MozReview-Commit-ID: L2ylG5KrXTU

--HG--
extra : rebase_source : ca1deece6117e843d691a13fff05bd0f97ec0408
2018-04-12 23:48:16 -06:00
..
apps bug 1439732 - fixup for backing out bug 1415991 post bug 1421084 (so Firefox 60 only) r=jcj 2018-02-20 12:28:01 -08:00
certverifier Backed out 4 changesets (bug 525063) on request from Andi. a=backout 2018-04-13 16:01:28 +03:00
manager Merge inbound to mozilla-central. a=merge 2018-04-20 01:29:10 +03:00
nss Bug 1445731 - land NSS 3e452651e282 UPGRADE_NSS_RELEASE, r=me 2018-04-19 10:27:14 +02:00
pkix Backed out 4 changesets (bug 525063) on request from Andi. a=backout 2018-04-13 16:01:28 +03:00
sandbox Bug 1439057 - Tighten /dev/shm access in Linux content sandbox policy. r=froydnj,gcp 2018-04-12 23:48:16 -06:00
.eslintrc.js Bug 1392119 - Enable the ESLint no-caller rule across mozilla-central r=standard8 2017-08-23 13:38:24 +01:00
generate_certdata.py Bug 1402012 - Update buildconfig.py to use PartialConfigEnvironment; r=glandium 2017-08-24 22:52:01 -04:00
generate_mapfile.py Bug 1350362 Fix NSS Build System for MinGW r=ted 2017-05-12 11:39:00 -05:00
moz.build Bug 1445763 - Update moz.build meta data with "Firefox Build System". r=froydnj 2018-03-14 21:44:46 +01:00
nss.symbols Bug 1429148 - Add nsIPK11Token.isInternalKeyToken. r=keeler,MattN 2018-02-20 20:43:41 -03:00