| commit | 906ac451d1894c49ef0489f5d8cad14db0bae049 | [log] [tgz] |
|---|---|---|
| author | Kevin McNee <mcnee@chromium.org> | Tue Aug 17 20:31:41 2021 |
| committer | Copybara-Service <copybara-worker@google.com> | Tue Aug 17 20:48:58 2021 |
| tree | 954816a7a10f1f77dc3c576800dd94dfc3fa9d5b | |
| parent | 6c818e7e9ae5485491183f393a2286242fbec22f [diff] |
Revert "Reland "Don't include hang_watcher.h from thread_restrictions.h"" This reverts commit 087f254cc65ea6c9fd69fa0ba0ac67bf25729ccf. Reason for revert: https://ci.chromium.org/ui/p/chromium/builders/ci/ios-device/196479/overview Original change's description: > Reland "Don't include hang_watcher.h from thread_restrictions.h" > > This is a reland of 0e6733427f4e95b1fda5306c849eb5c16de8d8c3 > This reland fixes more IWYU issues. > > Original change's description: > > Don't include hang_watcher.h from thread_restrictions.h > > > > This is only needed in thread_restrictions.cc. > > We also fix IWYU issues that this removal revealed. > > > > Bug: 1227131 > > Change-Id: I68e19fc27b3ab32f3b423b44c6b4a431a9927732 > > Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3060580 > > Auto-Submit: Kevin McNee <mcnee@chromium.org> > > Reviewed-by: Lei Zhang <thestig@chromium.org> > > Reviewed-by: Albert J. Wong <ajwong@chromium.org> > > Reviewed-by: Kinuko Yasuda <kinuko@chromium.org> > > Owners-Override: Lei Zhang <thestig@chromium.org> > > Commit-Queue: Kevin McNee <mcnee@chromium.org> > > Cr-Commit-Position: refs/heads/master@{#912313} > > Bug: 1227131 > Cq-Include-Trybots: luci.chromium.try:win-official;luci.chrome.try:win-chrome,mac-chrome,linux-chrome > Change-Id: I436be161287647e132c49ec9a31ad0eeda202564 > Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3098329 > Reviewed-by: Lei Zhang <thestig@chromium.org> > Owners-Override: Lei Zhang <thestig@chromium.org> > Commit-Queue: Kevin McNee <mcnee@chromium.org> > Cr-Commit-Position: refs/heads/master@{#912712} Bug: 1227131 Change-Id: Ib4eb46a7434ea919cdaa5b5e310c9ae568bcfe96 Cq-Include-Trybots: luci.chromium.try:win-official;luci.chrome.try:win-chrome,mac-chrome,linux-chrome No-Presubmit: true No-Tree-Checks: true No-Try: true Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3101165 Auto-Submit: Kevin McNee <mcnee@chromium.org> Bot-Commit: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com> Commit-Queue: Cammie Smith Barnes <cammie@chromium.org> Owners-Override: Cammie Smith Barnes <cammie@chromium.org> Cr-Commit-Position: refs/heads/master@{#912720} NOKEYCHECK=True GitOrigin-RevId: dd24691bf67ac55dacc973b49887d78a9135174c
This directory contains platform-specific sandboxing libraries. Sandboxing is a technique that can improve the security of an application by separating untrustworthy code (or code that handles untrustworthy data) and restricting its privileges and capabilities.
Each platform relies on the operating system's process primitive to isolate code into distinct security principals, and platform-specific technologies are used to implement the privilege reduction. At a high-level:
mac/ uses the Seatbelt sandbox. See the detailed design for more.linux/ uses namespaces and Seccomp-BPF. See the detailed design for more.win/ uses a combination of restricted tokens, distinct job objects, alternate desktops, and integrity levels. See the detailed design for more.Built on top of the low-level sandboxing library is the //sandbox/policy component, which provides concrete policies and helper utilities for sandboxing specific Chromium processes and services. The core sandbox library cannot depend on the policy component.