1800933 - Let Arbitrary Code Guard (ACG) in RDD and WMF ride the trains

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, enhancement, P2)

Description

[Yannis Juglaret [:yannis]]

In bug 1783223, we have enabled two mitigations behind #ifdef NIGHTLY_BUILD guards:

• ACG-with-opt-out in RDD and audio utility WMF processes for x86 builds;
• ACG in RDD for x64 builds (audio utility WMF processes already have ACG on the release channel).

We should consider letting these new mitigations ride the trains.

Comment 1

[Gian-Carlo Pascutto [:gcp]]

Bob noted we want this to be controllable via prefs.

Comment 2

[Yannis Juglaret [:yannis]]

Attachment: Bug 1800933 - Let ACG in RDD and WMF ride the trains. r=bobowen

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/41d74031b1a0
Let ACG in RDD and WMF ride the trains. r=bobowen

Comment 4

[Yannis Juglaret [:yannis]]

This patch adds two new prefs: security.sandbox.rdd.acg.enabled and security.sandbox.utility-wmf.acg.enabled.

Comment 5

[Natalia Csoregi [:nataliaCs]]

https://hg.mozilla.org/mozilla-central/rev/41d74031b1a0

Comment 6

[Ryan VanderMeulen [:RyanVM]]

Added to the Fx109 relnotes.