Bug 1027902: Use an intial integrity level of low for the GMP sandbox on Windows. r=tabraldes

This commit is contained in:
Bob Owen 2014-11-27 08:44:45 +00:00
parent 56249b7725
commit 064df32588

View File

@ -149,13 +149,8 @@ SandboxBroker::SetSecurityLevelForGMPlugin()
result = mPolicy->SetAlternateDesktop(true);
ret = ret && (sandbox::SBOX_ALL_OK == result);
// We can't use an alternate desktop/window station AND initially
// set the process to low integrity. Upstream changes have been
// made to allow this and we should uncomment this section once
// we've rolled forward.
// result =
// mPolicy->SetIntegrityLevel(sandbox::INTEGRITY_LEVEL_LOW);
// ret = ret && (sandbox::SBOX_ALL_OK == result);
result = mPolicy->SetIntegrityLevel(sandbox::INTEGRITY_LEVEL_LOW);
ret = ret && (sandbox::SBOX_ALL_OK == result);
result =
mPolicy->SetDelayedIntegrityLevel(sandbox::INTEGRITY_LEVEL_UNTRUSTED);