gecko-dev/security/sandbox
Jed Davis cbde13526d Bug 1725148 - Fix how we find the Xauthority file for sandbox policies. r=gcp
If the `XAUTHORITY` env var is unset, libXau will fall back to
`$HOME/.Xauthority`, but our content sandbox policy didn't handle that
case when it needs to allow access to that file; this patch corrects
that oversight.

This broke WebGL as of bug 1635451, because we no longer eagerly connect
to the X server before sandbox startup, only as needed for WebGL.

Usually the `XAUTHORITY` env var is set even if the file is in its
default location, but some environments (including but not limited to
the Linux VMs on Chrome OS) do not set it.

Differential Revision: https://phabricator.services.mozilla.com/D127984
2021-10-14 03:12:40 +00:00
..
chromium Bug 1716024 p1: Change CET support to compatible modules only. r=handyman 2021-07-19 07:36:19 +00:00
chromium-shim Bug 1716024 p1: Change CET support to compatible modules only. r=handyman 2021-07-19 07:36:19 +00:00
common Bug 1730265: Add includes to SandboxTestingChild.cpp and SandboxTestingParent.cpp to fix build errors with --disable-unified-build. r=handyman 2021-09-10 22:07:52 +00:00
linux Bug 1725148 - Fix how we find the Xauthority file for sandbox policies. r=gcp 2021-10-14 03:12:40 +00:00
mac Bug 1729453 - Allow socket process to enable TCSM, r=haik 2021-09-08 07:17:23 +00:00
test Bug 1732580 - Allow read access to files under $SNAP/ in the webcontent sandbox. r=gcp 2021-10-08 19:12:16 +00:00
win Bug 1732150 - Remove MITIGATION_DYNAMIC_CODE_DISABLE when we want to parsing PAC on socket process, r=bobowen 2021-10-11 19:17:58 +00:00
moz.build Bug 1732580 - Allow read access to files under $SNAP/ in the webcontent sandbox. r=gcp 2021-10-08 19:12:16 +00:00