mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
c0003b43bf
This adds "hasSeccompBPF" for seccomp-bpf support; other "has" keys will be added in the future (e.g., user namespaces). This also adds "canSandboxContent" and "canSandboxMedia", which are absent if the corresponding type of sandboxing isn't enabled at build type (or is disabled with environment variables), and otherwise present as a boolean indicating whether that type of sandboxing is supported. Currently this is always the same as hasSeccompBPF, but that could change in the future. Some changes have been made to the "mozilla/Sandbox.h" interface to support this; the idea is that the MOZ_DISABLE_*_SANDBOX environment variables should be equivalent to disabling MOZ_*_SANDBOX at build time. |
||
|---|---|---|
| .. | ||
| glue | ||
| android_arm_ucontext.h | ||
| android_i386_ucontext.h | ||
| android_ucontext.h | ||
| arm_linux_syscalls.h | ||
| LICENSE | ||
| linux_seccomp.h | ||
| linux_syscalls.h | ||
| moz.build | ||
| Sandbox.cpp | ||
| Sandbox.h | ||
| SandboxAssembler.cpp | ||
| SandboxAssembler.h | ||
| SandboxFilter.cpp | ||
| SandboxFilter.h | ||
| SandboxInternal.h | ||
| SandboxLogging.h | ||
| x86_32_linux_syscalls.h | ||
| x86_64_linux_syscalls.h | ||