Jed Davis d64e9b800d Bug 1396542 - Let sandboxed content processes read /var/lib/dbus/machine-id. r=gcp ... PulseAudio is the only thing that's known to need this. Note that the same file often exists as /etc/machine-id, and we currently allow reading all of /etc (which includes other fingerprinting hazards as well). MozReview-Commit-ID: FoyKQzhAV6M --HG-- extra : rebase_source : 593ee0b94cf507681a034d22cd06a9050d56b86a		2017-09-19 19:54:41 -06:00
..
broker	Bug 1396542 - Let sandboxed content processes read /var/lib/dbus/machine-id. r=gcp	2017-09-19 19:54:41 -06:00
glue	Bug 1384819 (part 1) - Split MozStackWalk(). r=glandium.	2017-07-27 12:46:47 +10:00
gtest	Backed out 3 changesets (bug 1380701, bug 1384804)	2017-08-24 15:02:48 -06:00
interfaces	Bug 1286865 - Step 2: Add XPCOM bindings for sandbox syscall reporter. r=gcp r=glandium	2017-01-30 18:50:41 -07:00
reporter	Bug 1363378 - Set close-on-exec in sandbox-related sockets held by parent process. r=gcp	2017-09-13 12:25:35 -06:00
LinuxCapabilities.cpp	…
LinuxCapabilities.h	…
LinuxSched.h	Bug 1272062 - Merge security/sandbox/linux/common into its parent directory. r=gcp	2016-10-27 22:06:00 +02:00
Sandbox.cpp	Backed out 3 changesets (bug 1383007, bug 1376910)	2017-07-26 12:50:28 -06:00
Sandbox.h	Bug 1308400 - Support file process, whitelist path prefs. r=jld	2017-07-24 16:32:22 +02:00
SandboxBrokerClient.cpp	Backed out 3 changesets (bug 1380701, bug 1384804)	2017-08-24 15:02:48 -06:00
SandboxBrokerClient.h	Backed out 3 changesets (bug 1380701, bug 1384804)	2017-08-24 15:02:48 -06:00
SandboxChroot.cpp	Bug 1338086 - Remove useless else blocks in order to reduce complexity in security/sandbox/linux/ r=gcp	2017-02-09 10:56:05 +01:00
SandboxChroot.h	Bug 1272062 - Merge security/sandbox/linux/common into its parent directory. r=gcp	2016-10-27 22:06:00 +02:00
SandboxFilter.cpp	Bug 1397753 - Disallow kill() in sandboxed content processes. r=gcp	2017-09-07 08:29:02 -06:00
SandboxFilter.h	Bug 1372428 - Extend file pre-opening for sandboxed media plugins. r=gcp	2017-07-07 08:58:50 -06:00
SandboxFilterUtil.cpp	…
SandboxFilterUtil.h	Bug 1376653 - Fix handling of architecture differences for getdents. r=gcp	2017-07-11 17:03:06 -06:00
SandboxHooks.cpp	Bug 1376643 - Use 'nullptr' where applicable in security/sandbox/. r=gcp	2017-06-27 17:56:00 +02:00
SandboxInfo.cpp	Bug 1317735 - Consolidate env vars for logging. r=jimm	2017-01-23 12:46:49 -08:00
SandboxInfo.h	Bug 1317735 - Consolidate env vars for logging. r=jimm	2017-01-23 12:46:49 -08:00
SandboxInternal.h	Bug 1257361 - Simplify detecting threads that already have seccomp-bpf applied. r=tedd r=gcp	2016-12-06 12:38:22 -10:00
SandboxLogging.cpp	…
SandboxLogging.h	…
SandboxOpenedFiles.cpp	Bug 1372428 - Extend file pre-opening for sandboxed media plugins. r=gcp	2017-07-07 08:58:50 -06:00
SandboxOpenedFiles.h	Bug 1372428 - Extend file pre-opening for sandboxed media plugins. r=gcp	2017-07-07 08:58:50 -06:00
SandboxReporterClient.cpp	Bug 1286865 - Step 1: Gather syscall info from SIGSYS handlers into the parent process. r=gcp	2017-01-30 18:49:53 -07:00
SandboxReporterClient.h	Bug 1286865 - Step 1: Gather syscall info from SIGSYS handlers into the parent process. r=gcp	2017-01-30 18:49:53 -07:00
SandboxUtil.cpp	Bug 1302163 - Change code to use SprintfLiteral instead of snprintf. r=ehsan	2016-10-04 17:57:51 +02:00
SandboxUtil.h	…
moz.build	Bug 1386876 - Replace all uses of DISABLE_STL_WRAPPING with a template, remove DISABLE_STL_WRAPPING. r=glandium	2017-09-11 11:33:26 -07:00