gecko-dev/security/sandbox/linux
Jed Davis 08546b4b69 Bug 1650751 - Add FMODE_NONOTIFY to ignored file flags in Linux sandbox. r=gcp
As of kernel 5.8 (commit [e9c15badb][]), Linux will set the internal
`FMODE_NONOTIFY` flag on files that don't exist in the filesystem,
including (unnamed) pipes and sockets.  Although this flag isn't
properly part of the userspace API, it will be returned by F_GETFL, so
userspace code that tries to change file flags will pass it to F_SETFL.

The implementation of `F_SETFL` has an allow list of flags userspace can
change (`SETFL_MASK`) and ignores all others, but our sandbox has a list
of flags *known* to be ignored, because currently unknown flags could
potentially be accepted by the kernel in the future.

This patch adds `FMODE_NONOTIFY` as an ignored flag.

[e9c15badb]: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e9c15badbb7b20ccdbadf5da14e0a68fbad51015

Differential Revision: https://phabricator.services.mozilla.com/D83205
2020-07-13 12:18:00 +00:00
..
broker Bug 1644917 - Part 2: Cache as much of the content sandbox file policy as possible. r=gcp,Gijs 2020-07-02 11:26:11 +00:00
glue Bug 1650163 - Part 1: Switch native remoteType values to nsCString, r=farre,geckoview-reviewers,agi 2020-07-08 20:15:59 +00:00
gtest Bug 1614003 - Remove unused file mfbt/NullPtr.h r=froydnj 2020-02-07 19:08:17 +00:00
interfaces
launch Bug 1640345 - Add a hidden pref to prevent sandboxed content processes from connecting to the X server. r=gcp 2020-07-01 21:10:36 +00:00
reporter Bug 1608558 - pt1 - add linux sandboxing to socket process. r=gcp 2020-03-09 14:56:03 +00:00
LinuxSched.h
Sandbox.cpp Bug 1614933 - Ensure that glibc's lazy initializers run before we enable the content process sandbox on Linux; r=jld 2020-04-08 06:55:40 +00:00
Sandbox.h Bug 1608558 - pt1 - add linux sandboxing to socket process. r=gcp 2020-03-09 14:56:03 +00:00
SandboxBrokerClient.cpp Bug 1614003 - Remove unused file mfbt/NullPtr.h r=froydnj 2020-02-07 19:08:17 +00:00
SandboxBrokerClient.h
SandboxChrootProto.h Bug 1470591 - Part 2: Provide methods to recreate a delegated forker. r=gsvelto 2019-12-05 00:03:52 +00:00
SandboxFilter.cpp Bug 1650751 - Add FMODE_NONOTIFY to ignored file flags in Linux sandbox. r=gcp 2020-07-13 12:18:00 +00:00
SandboxFilter.h Bug 1608558 - pt1 - add linux sandboxing to socket process. r=gcp 2020-03-09 14:56:03 +00:00
SandboxFilterUtil.cpp
SandboxFilterUtil.h
SandboxHooks.cpp
SandboxInfo.cpp
SandboxInfo.h Bug 1613985 - Use default for equivalent-to-default constructors/destructors in security. r=rrelyea 2020-03-16 10:56:56 +00:00
SandboxInternal.h
SandboxLogging.cpp
SandboxLogging.h
SandboxOpenedFiles.cpp Bug 1609996 - Reorder some includes affected by the previous patches. r=froydnj 2020-01-20 16:19:48 +00:00
SandboxOpenedFiles.h
SandboxReporterClient.cpp
SandboxReporterClient.h
moz.build Bug 1639030 - Part 2: Roll-up of chromium sandbox update and patches to get a running browser. r=bobowen 2020-07-08 12:54:33 +00:00