1379635 - On Windows narrow down write access to TEMP dir for leak/bloat logging.

Status: NEW

(Core :: Security: Process Sandboxing, enhancement, P3)

Description

[Bob Owen (:bobowen)]

We allowed this broadly early on, but it looks like only bloat logging needs this at the moment.

By narrowing this down we should be able to run security/sandbox/test/browser_content_sandbox_fs.js in DEBUG builds.

Comment 1

[Alex Gaynor [:Alex_Gaynor]]

FWIW, here's what we do on macOS: https://dxr.mozilla.org/mozilla-central/source/dom/ipc/ContentChild.cpp?q=ContentChild.cpp&redirect_type=direct#1549-1560

Comment 2

[Joanna Jo [:jjo]]

Hi, just wanted to quickly introduce myself! I'm Joanna, and I'll be working with :handyman to help fix this bug.

Comment 3

[Jim Mathies [:jimm]]

Do we need to tie this to webrender such that the shader cache has access in non webrender builds?

Comment 4

[Bob Owen (:bobowen)]

This is debug only.