10 Commits

Author	SHA1	Message	Date
David Keeler	00014bbf23	bug 914716 - get seccomp-bpf sandboxing to compile on x86_64 r=kang	2013-09-25 11:14:34 -07:00
Vicamo Yang	34d42311bd	Bug 909658: B2G emulator-x86 has no __NR_{recv,msgget,semget}. r=kang	2013-09-11 00:23:35 +08:00
Jed Davis	a3fbb55f38	Bug 908907 - Fill in gaps in seccomp-bpf whitelist for b2g. r=kang, r=bsmith ... Relatively harmless syscalls: * dup, used by mozilla::ipc::Shmem * getuid, for android::IPCThreadState, used in audio decode * nanosleep, used by android::AudioTrack Of potential concern: * sched_setscheduler, used by audio threads in e.g. CubeVid This might be restrictable somewhat by inspecting its arguments. Of serious concern: * unlink, as a workaround for bug 906996 (q.v.). Note that we already allow open(), including for writing (temporary files, /dev/genlock on qcom devices, probably more), so allowing unlink won't make the situation much worse.	2013-09-06 09:13:59 -04:00
Mike Hommey	05b3f24e0e	Bug 912293 - Remove now redundant boilerplate from Makefile.in. r=gps	2013-09-05 09:01:46 +09:00
Brian O'Keefe	0ee041b9fd	Bug 875934 - Move LIBRARY_NAME to moz.build, batch 3; r=mshal	2013-08-15 09:02:09 -04:00
Jed Davis	840702aa2c	Bug 907002 - Add restart_syscall to seccomp whitelist. r=kang	2013-08-26 11:27:49 -04:00
Ms2ger	4d0ead0110	Bug 883284 - Part f: Move LIBXUL_LIBRARY into moz.build (p-z); r=glandium	2013-08-22 08:56:01 +02:00
Guillaume Destuynder	eda4902d8b	Bug 790923: Adds seccomp-bfp sandboxing support for B2G. r=khuey, r=gerv, r=agal, r=dhylands, r=keeler, r=imelven, a=kang.	2013-08-12 12:58:35 -07:00
Ms2ger	0f97870355	Backout changeset 9a57f0f347e3 for insufficient review.	2013-08-13 13:30:00 +02:00
Guillaume Destuynder	0351bab10b	Bug 790923: Adds seccomp-bfp sandboxing support for B2G. r=agal, r=dhylands, r=dkeeler, r=imelven, a=kang.	2013-08-12 12:58:35 -07:00