Google Git
Sign in
chromium/chromium/src/sandbox/HEAD
  1. e3c5d84 Fix unsafe buffer usage in setuid_sandbox_host.cc by Mahmoud Rashad · 13 hours ago main
  2. 7cee0c2 Update sandbox .sb files for a macOS 13 minimum by Avi Drissman · 3 days ago
  3. 9fe45cb [macoOS] Removes the kMacSandboxDistributedNotifications feature by Bryan Oltman · 3 days ago
  4. 1f39137 Revert "[macOS] Use process-isolated subdirectories for the GPU child process" by Lily Chen · 7 days ago
  5. 125c227 [macOS] Use process-isolated subdirectories for the GPU child process by Bryan Oltman · 10 days ago
  6. f1b1465 Reland "Reland "[mac] Enable aperitif on helper executables."" by Yue She · 11 days ago
  7. 9e38a92 Revert "Reland "[mac] Enable aperitif on helper executables."" by Volodymyr Plotkin · 11 days ago
  8. 618789c webnn: setup coreml compiler sandbox rules by Phillis Tang · 11 days ago
  9. c45c430 Reland "[mac] Enable aperitif on helper executables." by Liza Burakova · 12 days ago
  10. 297ca3f Revert "[mac] Enable aperitif on helper executables." by Adem Derinel · 14 days ago
  11. 22990fe [mac] Enable aperitif on helper executables. by Liza Burakova · 2 weeks ago
  12. 9c8b324 Fix include guard presubmit warnings by Victor Hugo Vianna Silva · 3 weeks ago
  13. 25aab98 Revert "[macOS] Use process-isolated subdirectories for the GPU child process" by Aliaksei Bahdzevich · 3 weeks ago
  14. fcac155 [macOS] Use process-isolated subdirectories for the GPU child process by Bryan Oltman · 3 weeks ago
  15. 2ac1ce3 Revert "Remove file-issue-extension permission from gpu seatbelt profile" by Bryan Oltman · 3 weeks ago
  16. 727326f Start loading msdia140.dll when loading dbghelp.dll by Devon Loehr · 4 weeks ago
  17. a9e64af Add GRO to fieldtrial_testing_config by Mohannad Farrag · 4 weeks ago
  18. 8f54579 Enable WinSboxModuleTamperingProtection by default by Will Harris · 4 weeks ago
  19. af0b56a [unsafe-buffers] Update allow_unsafe_buffers in sandbox/ SUID C files by Arthur Sonzogni · 4 weeks ago
  20. 8dcfa32 [sandbox/linux] Fix directory traversal vulnerability by Greg Thompson · 4 weeks ago
  21. 86344cd Enable WinSboxHighGPUJobMemoryLimits by default by Will Harris · 5 weeks ago
  22. 997a324 [finch] Remove the three-argument BASE_FEATURE macro everywhere it is by Julia Hansbrough · 5 weeks ago
  23. 361c10d Remove file-issue-extension permission from gpu seatbelt profile by Bryan Oltman · 5 weeks ago
  24. b061f8b [sandbox/linux] Fix off-by-one DCHECK in BrokerSimpleMessage::WriteBytes by Karim El Harim · 6 weeks ago
  25. a663ede media: make enable of v4l2/vaapi on linux possible by Jianfeng Liu · 6 weeks ago
  26. 37c67f3 [unsafe-buffers] Sandbox: Use std::array in baseline_policy_unittest by Arthur Sonzogni · 7 weeks ago
  27. 91b71b3 Fix unsafe buffer usage in seccomp_broker_process_unittest.cc by Joshua Peraza · 7 weeks ago
  28. 3e19954 [unsafe-buffers] Remove allow_unsafe_buffers from sandbox/ by Arthur Sonzogni · 7 weeks ago
  29. 588d321 Clean up: Fix 5 wrong escapes in 1 DEPS files in sandbox by yoshiki iguchi · 8 weeks ago
  30. 72d1933 Fix macOS 27 build of `chrome` target by Victor Hugo Vianna Silva · 8 weeks ago
  31. c83dc79 Add UNSAFE_BUFFERS macros to C API calls. by Liza Burakova · 8 weeks ago
  32. 6d5856b WebNN: Add a dedicated flag to disable the WebNN compiler process sandbox by mingmingtasd · 8 weeks ago
  33. b004489 Reland "Fix Javaless Renderer bugs" by Sam Maier · 8 weeks ago
  34. 7868c25 Revert "Fix Javaless Renderer bugs" by luci-bisection@appspot.gserviceaccount.com · 8 weeks ago
  35. 8606397 Fix Javaless Renderer bugs by Sam Maier · 8 weeks ago
  36. 90bdb71 WebNN: Align WebNN Compiler job memory limit with the renderer process by mingmingtasd · 8 weeks ago
  37. 4273744 sandbox: Allow recvmmsg in seccomp sandbox on Linux by Mohannad Farrag · 9 weeks ago
  38. a9d727a [macOS] Guard ODME process directory access behind flag by Bryan Oltman · 9 weeks ago
  39. 859a487 [macOS] Guard network process directory access behind flag by Bryan Oltman · 9 weeks ago
  40. 18a3f72 [WebNN] Tighten model-compilation utility sandbox to USER_LOCKDOWN by Rafael Cintron · 10 weeks ago
  41. 974cb22 fix: UsePerformanceHelper affinity mode by Richard Townsend · 10 weeks ago
  42. db7ad29 Remove code supporting macOS 12 from sandbox by Avi Drissman · 10 weeks ago
  43. 0bc587e Harden Speech Recognition Utility Process Sandbox on Windows by Evan Liu · 3 months ago
  44. 43b6b0c [tracing] Migrate async track events to more appropriate alternatives in sandbox/win by Etienne Pierre-doray · 3 months ago
  45. b97abb9 Migrate SysInfo::AmountOfPhysicalMemory callers to AmountOfTotalPhysicalMemory in sandbox/policy/win by Joe Mason · 3 months ago
  46. 7596fc4 fix: remove incorrect flag from sandbox/ test by Richard Townsend · 3 months ago
  47. 026845c Disable BaselinePolicyAndroid.SchedSetAffinity_Maybe_Allowed by Masa Fujita · 3 months ago
  48. ea341c6 [Gardener] Disable SchedGetAffinity_Maybe_Allowed test. by Filipa Senra · 3 months ago
  49. 534adc7 Revert "[Gardening] Fix BaselinePolicyAndroid affinity test" by Ivana Žužić · 3 months ago
  50. 9c0871b [Gardening] Fix BaselinePolicyAndroid affinity test by Ivana Žužić · 3 months ago
  51. d7337e5 Remove setPreferPowerEfficiency experiment by Richard Townsend · 3 months ago
  52. 4c39da1 Migrate SysInfo::AmountOfPhysicalMemory callers to AmountOfTotalPhysicalMemory in sandbox/policy/linux by Joe Mason · 3 months ago
  53. d197319 [macOS] Deny distributed notifications in the renderer sandbox by Bryan Oltman · 3 months ago
  54. d407c40 Run `gn format` on all BUILD.gn files. by Matt Stark · 3 months ago
  55. 1ec9592 Move test-only GetNtPathFromWin32Path into test file by Emily Stark · 3 months ago
  56. 272ebff Reland "Fix mmap seccomp policy in speech recognition sandbox" by Andrew Paseltiner · 4 months ago
  57. f8acb8c Revert "Fix mmap seccomp policy in speech recognition sandbox" by Ian Wells · 4 months ago
  58. 37259f7 Fix mmap seccomp policy in speech recognition sandbox by Andrew Paseltiner · 4 months ago
  59. d072df6 WebNN: Add kWebNNModelCompilation sandbox type by mingmingtasd · 4 months ago
  60. 2c9c12e seccomp: Add a test to ensure long term feature detection by Primiano Tucci · 4 months ago
  61. 0b13e47 [sandbox] Fix SYS_SECCOMP conflict with newer glibc by Ho Cheung · 4 months ago
  62. 3c404be Reland "Remove dependency on ATL Security objects" by Chris Davis · 4 months ago
  63. 2492a93 [sandbox] Enable Module Tampering Protection for CIG processes by Klaus · 4 months ago
  64. 5d45cbe Revert "Remove dependency on ATL Security objects" by Justin Lulejian · 4 months ago
  65. d6ded81 Remove dependency on ATL Security objects by Chris Davis · 4 months ago
  66. 9da15ab Allow PI futex operations on Android in the sandbox. by Primiano Tucci · 4 months ago
  67. 68cd6a7 Add akhna & ellyjones to sandbox/linux/OWNERS by Alex Gough · 5 months ago
  68. 597bd6b [Sandbox] Add a feature to remove the job memory limit for GPU by Jiawei Shao · 5 months ago
  69. 9bba534 Fix various IWYU errors related to base/logging.h by Daniel Cheng · 5 months ago
  70. 37aaf1a [sandbox] Update seccomp-bpf filters for arm64 glibc by Tom Anderson · 5 months ago
  71. 68f7598 [task] Inject ThreadDelegate through Thread constructor by Etienne Pierre-doray · 5 months ago
  72. 815e874 Cleanup: Remove histogram macros header includes in sandbox by Alexei Svitkine · 5 months ago
  73. 2ee2cbb Tighten macOS GPU sandbox restrictions by Dale Curtis · 5 months ago
  74. eb6cc9a Revert "Reland "Enable network sandbox by default on Windows"" by Will Harris · 5 months ago
  75. 0bbf2e0 [Windows] Remove legacy TestRunner code from the sandbox tests. by James Forshaw · 6 months ago
  76. e2a5f67 Reland "Enable network sandbox by default on Windows" by Will Harris · 6 months ago
  77. ab1e3e9 Convert to UNSAFE_TODO in sandbox by Arthur Sonzogni · 6 months ago
  78. fc6163b [Windows] Refactor remaining old style TestRunner integration tests. by James Forshaw · 6 months ago
  79. b4a606e [Windows] Refactor integration tests for process mitigations. by James Forshaw · 6 months ago
  80. 1eae871 spanification: automatically spanify sandbox/linux/bpf_dsl/test_trap_registry_unittest.cc etc. by Francisco Ochoa · 6 months ago
  81. 88e03e3 [Windows] Refactor integration tests for IPC, LPC, Warmup and Handles. by James Forshaw · 6 months ago
  82. ffe1f92 [Windows] Refactor sandbox validation tests. by James Forshaw · 6 months ago
  83. f2387b2 [Windows] Refactor integration tests for ZeroAppShim and DLL unloading. by James Forshaw · 6 months ago
  84. 9e6fda1 [Windows] Refactor integration tests for integrity levels. by James Forshaw · 6 months ago
  85. 94a49cc [Windows] Refactor integration tests for IPC, Handle Closer, ASAN. by James Forshaw · 6 months ago
  86. 59415c2 [Windows] Refactor integration tests for AppContainer. by James Forshaw · 6 months ago
  87. 2ab77c9 Allow MCAST_JOIN/LEAVE_SOURCE_GROUP in network service seccomp filter by Omar Ramadan · 6 months ago
  88. a6b198e [Windows] Update sandbox policy rule fuzzer to use wstring_view. by James Forshaw · 6 months ago
  89. b82014a [Windows] Update select tests to use new TestRunner API. by James Forshaw · 6 months ago
  90. 831481e [Windows] Implement new sandbox test runner API. by James Forshaw · 6 months ago
  91. 065e9b4 [Windows] Rework TestRunner dispatch and remove unsafe buffers. by James Forshaw · 6 months ago
  92. faf36c3 [Windows] Use base::CommandLine in SpawnTargetAsync. by James Forshaw · 6 months ago
  93. 10dec33 [Windows] Use string_view for sandbox policy interface. by James Forshaw · 6 months ago
  94. 4f48746 [Windows] Convert Sid class to using wstring_view and span. by James Forshaw · 6 months ago
  95. 114deb3 [Okta SSO] Execute URLSessionURLLoader in the Network Service by Stanisław Solarewicz · 6 months ago
  96. 469b8b6 [Windows] Directly initialize Windows sandbox IPC calls. by James Forshaw · 6 months ago
  97. d494b52 [Windows] Convert sandbox IPC to use span and remove IPCInt. by James Forshaw · 7 months ago
  98. a1039f6 [Windows] Remove unsafe buffer usage and use variants in IPC arguments. by James Forshaw · 7 months ago
  99. d803493 [Windows] Remove unused sandbox policy opcodes. by James Forshaw · 7 months ago
  100. 3cbdabd Directly link NtQueryInformationProcess by Alex Gough · 7 months ago