Open Bug 1671672 Opened 5 years ago Updated 4 years ago

Investigate improving RDD process sandbox.

Categories

(Core :: Security: Process Sandboxing, enhancement, P2)

Product:
Core
Component:
Security: Process Sandboxing
Platform:
All
Windows
Type:
enhancement

Tracking

()

People

(Reporter: bobowen, Unassigned)

References

Details

Bug 1671667 deals with the specific issue for 32-bit dynamic code.

This bug is to look into improving the other two things we had to weaken, i.e. moving to USER_LIMITED and INTEGRITY_LEVEL_LOW.

It should be noted that I believe all decoder usage will currently require at least some access to the GPU to upload textures for performance. Given that the chromium sandbox uses these two for its GPU process sandbox, we may not be able to achieve anything here.

Presumably, if no GPU is being used at all, we should be able to improve things.

You need to log in before you can comment on or make changes to this bug.