995067 - Open /proc/cpuinfo conflicts with sandbox

Status: NEW

(Core :: Security: Process Sandboxing, defect, P3)

Description

[Stephanie Ouillon [:arroway] (needinfo me)]

I don't have a stacktrace for this one, only the return address pointing to 
./webrtc/trunk/webrtc/system_wrappers/source/android/cpu-features.c:72

open("/proc/cpuinfo", O_READONLY)

Comment 1

[Stephanie Ouillon [:arroway] (needinfo me)]

This is happening when an app starts up.

Comment 2

[Randell Jesup [:jesup] (needinfo me)]

I'll note that once the LoadManager is enabled by default, we'll look at /proc/stat in content/media/webrtc/LoadMonitor.cpp.  Also there are patches underway to get similar info for Windows and Mac.  See bug 1007775

Comment 3

[Jed Davis [:jld] ⟨⏰|UTC-7⟩ ⟦he/him⟧]

Move process sandboxing bugs to their new, separate component.

(Sorry for the bugspam; filter on 3c21328c-8cfb-4819-9d88-f6e965067350.)

Comment 4

[Gian-Carlo Pascutto [:gcp]]

LoadManager is one of those things that logically belongs in the parent.

Comment 5

[Jim Mathies [:jimm]]

https://dxr.mozilla.org/mozilla-central/rev/52285ea5e54c73d3ed824544cef2ee3f195f05e6/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp#