1374718 - Remove strictContentSandbox flag for mochitest

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, enhancement)

Description

[Alex Gaynor [:Alex_Gaynor]]

It's pretty out of date. It sets the content process sandbox to level 1, which is _less_ strict than the current nightly default of 2. I don't think there's a real use case for this, as evidenced by the fact that it's been broken/actively harmful for a while now.

Comment 1

[Alex Gaynor [:Alex_Gaynor]]

Attachment: Bug 1374718 - removed strictContentSandbox mochitest option;

For a while now it has been making the content process sandbox less strict.

Review commit: https://reviewboard.mozilla.org/r/150994/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/150994/

Comment 3

[Bob Owen (:bobowen)]

Comment on attachment 8879640 [details]
Bug 1374718 - removed strictContentSandbox mochitest option;

https://reviewboard.mozilla.org/r/150994/#review155760

Just duped over Bug 1363788, from my comment there I don't think you've got all of this, there are some mozharness files at least.

Comment 4

[Alex Gaynor [:Alex_Gaynor]]

Comment on attachment 8879640 [details]
Bug 1374718 - removed strictContentSandbox mochitest option;

Review request updated; see interdiff: https://reviewboard.mozilla.org/r/150994/diff/1-2/

Comment 5

[Bob Owen (:bobowen)]

Comment on attachment 8879640 [details]
Bug 1374718 - removed strictContentSandbox mochitest option;

https://reviewboard.mozilla.org/r/150994/#review155804

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/3d1f8cbf8836
removed strictContentSandbox mochitest option; r=bobowen

Comment 7

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/3d1f8cbf8836