1750539 - Move `SNAP` sandbox rules to more strict

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, enhancement, P3)

Comment 1

[:gerard-majax]

Attachment: Bug 1750539 - Sandbox with SNAP= needs pre-existing directory r?jld!

Comment 2

[:gerard-majax]

Attachment: Bug 1750539 - Make XDG_CONFIG_HOME lifecycle handled by test harness r?jld!

Depends on D137457

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/0433ecd3427d
Sandbox with SNAP= needs pre-existing directory r=gcp
https://hg.mozilla.org/integration/autoland/rev/59a79a27eb78
Make XDG_CONFIG_HOME lifecycle handled by test harness r=gcp

Comment 4

[Cristina Cozmuta (:CrissCozmuta)]

Backed out for causing mochitest failures.

Backout link: https://hg.mozilla.org/integration/autoland/rev/08899f653c5a8a557a2c0bf00f1526e4cb66a333

Push with failures: https://treeherder.mozilla.org/jobs?repo=autoland&resultStatus=testfailed%2Cbusted%2Cexception%2Crunnable&revision=4caa5563e76d57ce249acdf526ee1ea5c4ee57e0&selectedTaskRun=ZifDr9rDQjuv9Gu0lBcugw.0

Link to failure log:
https://treeherder.mozilla.org/logviewer?job_id=367071909&repo=autoland&lineNumber=2341
https://treeherder.mozilla.org/logviewer?job_id=367071021&repo=autoland&lineNumber=2349

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/fb9d3ecb4413
Sandbox with SNAP= needs pre-existing directory r=gcp
https://hg.mozilla.org/integration/autoland/rev/3bdac1551b45
Make XDG_CONFIG_HOME lifecycle handled by test harness r=gcp

Comment 6

[Marian-Vasile Laza]

https://hg.mozilla.org/mozilla-central/rev/fb9d3ecb4413
https://hg.mozilla.org/mozilla-central/rev/3bdac1551b45

Comment 7

[Olivier Tilloy]

Nice one. The comment in security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp (currently lines 586-588) is now outdated, as it refers to the previous use of AddFutureDir(). It should probably be removed altogether.