Security/Sandbox/2014-06-26

« previous week | index | next week »

26 June 2014

• Windows sandboxing
  • Landed patch for bug 1014002: Caused tests to fail when sandboxing enabled on Windows. Blocked both gmp/OpenH264 and content process sandboxing
  • Implementing review comments for bug 985252 (Windows gmp/OpenH264 sandbox). Should have updated patch for review by EOW
  • Continuing to investigate follow-up issues (ratcheting down permissions)
  • Logging
    • Warn only sandbox now compiling (using callbacks instead of linking) and running on Try. Unfortunately still using a pretty nasty hack to get the function pointers for the callbacks into the interception code.
    • Bug 1018966
• Mac sandboxing
• Linux/B2G sandboxing
  • seccomp-bpf on Dolphin (actually committed on the 13th)
  • …so we can make it mandatory on KK+ B2G now (bug 1009995)
  • MediaCache is now e10s'ed
  • jhector working on the supervisor bug https://bugzilla.mozilla.org/show_bug.cgi?id=845191