1909652 - Put prespawn CIG behind a pref

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, task)

Description

[Yannis Juglaret [:yannis]]

And temporarily disable this pref completely to see if bug 1905690 is related to prespawn CIG.

Comment 1

[Yannis Juglaret [:yannis]]

Attachment: Bug 1909652 - Put prespawn CIG behind a pref. r=gstoll,#win-reviewers

Introduce a new security.sandbox.cig.prespawn.enabled preference to
decide whether we want CIG applied pre-spawn or later when lowering the
sandbox.

Comment 2

[Yannis Juglaret [:yannis]]

Attachment: Bug 1909652 - Temporarily disable pre-spawn CIG in Nightly. r=gstoll,#win-reviewers

Pre-spawn CIG might explain why the volume in bug 1905690 is
Nightly-only. This patch disables pre-spawn CIG in Nightly to see if
that has an impact on the volume.

Depends on D217565

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/3844ab2b4812
Put prespawn CIG behind a pref. r=gstoll,win-reviewers
https://hg.mozilla.org/integration/autoland/rev/1879ed2b3c4a
Temporarily disable pre-spawn CIG in Nightly. r=gstoll,win-reviewers

Comment 4

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/3844ab2b4812
https://hg.mozilla.org/mozilla-central/rev/1879ed2b3c4a