1362579 - Add sandboxing to the VR process

Status: NEW

(Core :: WebVR, enhancement)

Description

[:kip (Kearwood Gilbert)]

In Bug 1362578, we are moving the VRManager functionality to its own process.  This will allow more restrictive sandboxing rules to be applied to the GPU process as the rules required for the Oculus and OpenVR runtimes can be applied separately to the new VR process.

We are working with external parties to ensure that the VR runtimes have prefixes in the resource paths that they access to allow wildcards to work effectively when the runtimes are updated by end users.

If its not possible to ensure forward compatibility with these rules, we will need to either have limited sandboxing on the VR process or implement a mechanism to update the sandbox rules for the VR process in release builds.  (The sandboxing rules are currently hard-coded)

Comment 1

[:kip (Kearwood Gilbert)]

Please see comments in Bug 1359460 for details of the initial exploration of the sandbox rules required for OpenVR and Oculus runtimes.