gecko-dev/security/sandbox
Jed Davis 927e70c7a5 Bug 1425274 - Filter socketpair() in content sandbox on 32-bit x86 with new-enough kernels. r=gcp
This replaces the globals for whether socket calls (and ipc(2) calls, but
we never used that) have real arguments with a parameter, which in hindsight
should have been done in bug 1273852, which is when we started handling
both socketcall(2) and separate socket calls in the same policy.  This
allows handling the two cases differently.

MozReview-Commit-ID: 1pfckmCpJlW

--HG--
extra : rebase_source : 4b8459f01e8748fea95cbcb6eeb689f01417ca5b
2018-01-29 17:36:06 -07:00
..
chromium Bug 1432381: Replace sidestep resolvers with stubs as they are not actually used. r=aklotz 2018-02-06 08:52:26 +00:00
chromium-shim Bug 1432381: Replace sidestep resolvers with stubs as they are not actually used. r=aklotz 2018-02-06 08:52:26 +00:00
common Bug 1126437 - Add Linux content sandbox level 4 for blocking socket APIs. r=gcp 2018-01-23 22:35:44 -07:00
linux Bug 1425274 - Filter socketpair() in content sandbox on 32-bit x86 with new-enough kernels. r=gcp 2018-01-29 17:36:06 -07:00
mac Bug 1359566 - remove permissions related to audio from the macOS content process sandbox when cubeb remoting is enabled; r=haik 2017-12-21 09:59:47 -05:00
test Bug 1386404 - Enable content-process specific tmpdir on Linux. r=jld 2018-01-09 16:29:40 +01:00
win Backed out 2 changesets (bug 1407693) for windows mingw32 bustages at /builds/worker/workspace/build/src/ipc/glue/GeckoChildProcessHost.cpp:1032 on a CLOSED TREE 2018-02-07 21:42:47 +02:00
moz.build Bug 1432381: Replace sidestep resolvers with stubs as they are not actually used. r=aklotz 2018-02-06 08:52:26 +00:00