DescriptionMac: Tell the GPU sandbox to deny a few things.
It's now no longer allowed to do network requests and can't access most files.
Here are the stacks that it prints if I patch in http://codereview.chromium.org/1765005/show: http://codepad.org/6zrJfnlB
BUG=48607
TEST=GPU stuff still works. When you run with --enable-sandbox-logging, quite a bunch of stuff is logged as "denied".
Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=68321
Patch Set 1 #Patch Set 2 : unit test compiles and passes #Patch Set 3 : more restrictive #Patch Set 4 : remove debug code #Patch Set 5 : '' #Patch Set 6 : works in release #
Total comments: 14
Patch Set 7 : comments #Patch Set 8 : browser tests pass #
Total comments: 1
Messages
Total messages: 11 (0 generated)
|