Open Bug 1966157 Opened 2 months ago Updated 2 months ago

Investigate whether we can use FILE_ALLOW_READONLY for the shader-cache directory.

Categories

(Core :: Security: Process Sandboxing, enhancement, P3)

Product:
Core
Component:
Security: Process Sandboxing
Type:
enhancement

Tracking

()

People

(Reporter: bobowen, Unassigned)

References

(Blocks 1 open bug)

Details

Currently the shader-cache directory in the profile is created in the GPU process when it doesn't exist, so we have to give create access through the policy.
If we make sure the directory is created up front, we might be able to change the policy for the dir to FILES_ALLOW_READONLY.

You need to log in before you can comment on or make changes to this bug.