1793966 - Enable low privileged application container on MF Media Engine utility process

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, enhancement, P2)

Description

[Bob Owen (:bobowen)]

We need to relax other parts of the windows process sandbox for the MF Media Engine.
This is because of the coarse grained approach that many of these security features take, where access required for certain things means a wide range of other unrelated access is also allowed.
To improve this situation and restrengthen the sandbox we want to enable a Low Privileged Application Container. This should allow us to only enable access to a more focussed set of resources.

Comment 1

[Bob Owen (:bobowen)]

https://treeherder.mozilla.org/jobs?repo=try&revision=5209062364288252f32fa8d29062fd231a6eefa1

Comment 2

[Bob Owen (:bobowen)]

Attachment: Bug 1793966: Enable low privileged application container on MF Media Engine utility process. r=handyman!

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/362c853f3879
Enable low privileged application container on MF Media Engine utility process. r=handyman

Comment 4

[Cristian Tuns]

https://hg.mozilla.org/mozilla-central/rev/362c853f3879