Open Bug 1257184 Opened 10 years ago Updated 3 years ago

Improve the configuration of the Windows process sandbox policies, so that it is less hard coded (Death To Levels).

Categories

(Core :: Security: Process Sandboxing, enhancement, P3)

Product:
Core
Component:
Security: Process Sandboxing
Platform:
All
Windows
Type:
enhancement

Tracking

()

Tracking Flags:
Tracking Status
firefox48 --- affected

People

(Reporter: bobowen, Unassigned)

References

Details

(Whiteboard: sb+)

It would be useful and generally clearer if the sandbox policies were represented by some sort of structure / class, which the SandboxBroker would translate into chromium sandbox settings. This would make it easier to vary the sandbox, for example per GMP and also to load test settings from a file. It would also help to remove the process specific switching in GeckoChildProcessHost, see bug 1124167.
not blocking initial rollout, but we want to get this cleaned up in the second milestone.
Whiteboard: [sb?] → sbwc2
Whiteboard: sbwc2 → sb+
Priority: -- → P2
Summary: Improve the configuration of the Windows process sandbox policies, so that it is less hard coded. → Improve the configuration of the Windows process sandbox policies, so that it is less hard coded (Death To Levels).
Moving to p3 because no activity for at least 1 year(s). See https://github.com/mozilla/bug-handling/blob/master/policy/triage-bugzilla.md#how-do-you-triage for more information
Priority: P2 → P3
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.