1. 2c06a0e Syscall wrappers: Skip LStat test in ChromeOS by Ryan Borzello · 16 hours ago main
  2. 4a54ebb Make the LaCrOS GPU sandbox behave similarly to ash-GPU. by Andres Calderon Jaramillo · 4 days ago
  3. c55805a [Linux sandbox] cleanup TrapRegistry's "atomics" by Matthew Denton · 8 days ago
  4. ab3c6a6 Fix output of AppContainerCapabilities on chrome://sandbox by Alex Gough · 2 weeks ago
  5. dec0eed Share LowLevelPolicy between sandboxed processes by Alex Gough · 2 weeks ago
  6. 67fd715 Add sandbox launcher delegate GetSandboxTag by Alex Gough · 2 weeks ago
  7. a80d278 Skeleton for shared backing data for sandbox policies by Alex Gough · 3 weeks ago
  8. 5dc3580 MTECheckedPtr: Disarm select members by Kalvin Lee · 3 weeks ago
  9. 0276c3b Update base::Value list usage in sandbox_policy_diagnostic.cc by Matt Menke · 3 weeks ago
  10. b382ce1 Moves subsystem and semantics to enum class by Alex Gough · 4 weeks ago
  11. b13d5ba Reland "Prevent unsafe narrowing: base/ for Linux part 2 of n" by Peter Kasting · 4 weeks ago
  12. f49634b Allowlist syscalls in the Speech Recognition sandbox policy by evliu · 4 weeks ago
  13. a2b2c46 Revert "Fix downstream breakage due to dep on :sandbox_linux_unittests" by Hazem Ashmawy · 4 weeks ago
  14. 66c9720 Revert "[sandbox] Port Linux to use the new sandbox_unittests" by Henrique Nakashima · 4 weeks ago
  15. 50519ee Fix downstream breakage due to dep on :sandbox_linux_unittests by Henrique Nakashima · 4 weeks ago
  16. 546f2b3 [sandbox] Port Linux to use the new sandbox_unittests by Guocheng Wei · 4 weeks ago
  17. 0a5bc39 Revert "Prevent unsafe narrowing: base/ for Linux part 2 of n" by Sky Malice · 4 weeks ago
  18. 320eed5 [Cast Convergence] Remove is_chromecast from //sandbox by David Dorwin · 4 weeks ago
  19. 08857b5 Prevent unsafe narrowing: base/ for Linux part 2 of n by Peter Kasting · 5 weeks ago
  20. 553dcfe [sandbox] Port Mac to use the new sandbox_unittests by Guocheng Wei · 6 weeks ago
  21. b966f4d Revert "[fuchsia] Permit PerfettoBridge capabilities for Chrome and WebEngine." by Wez · 6 weeks ago
  22. fd3a81c Create sandbox_unittests target by Guocheng Wei · 6 weeks ago
  23. 9c4879b Modernising base::JsonReader to return base::expected by Claudio DeSouza · 6 weeks ago
  24. 05b38e0 Fix Windows build with enable_plugins=false. by Lei Zhang · 7 weeks ago
  25. d956ea1 Fix Mac build with enable_plugins=false. by Lei Zhang · 7 weeks ago
  26. 88e004c [fuchsia] Permit PerfettoBridge capabilities for Chrome and WebEngine. by Kevin Marshall · 7 weeks ago
  27. bd5c81e [BRP] Revert some fields in the sandbox from raw_ptr<T> to T* by Sergei Glazunov · 7 weeks ago
  28. 7918094 Rewrite raw pointer fields to use raw_ptr<T> for linux by Keishi Hattori · 7 weeks ago
  29. 5dd49a6 Update sandbox exceptions for ChromeScreenAI library. by Ramin Halavati · 8 weeks ago
  30. 1b2035b Reland "Reland "[fuchsia] Add fuchsia.hwinfo.ProductInfo support"" by Bryant Chandler · 8 weeks ago
  31. 15abb91 Revert "Reland "[fuchsia] Add fuchsia.hwinfo.ProductInfo support"" by Matt Reichhoff · 8 weeks ago
  32. 123e4cf Reland "[fuchsia] Add fuchsia.hwinfo.ProductInfo support" by Bryant Chandler · 8 weeks ago
  33. e72323d Remove kerrnel@chromium.org from sandbox/mac/OWNERS. by Owners Cleanup · 9 weeks ago
  34. 5d67330 Second Reland of "Build TFLite with ruy on all platforms" by Robert Ogden · 9 weeks ago
  35. 28fc0e1 mac: Add crash keys in content::ChildThreadImpl::IOThreadState::GetTaskPort by Robert Sesek · 9 weeks ago
  36. 25566a1 Revert "[fuchsia] Add fuchsia.hwinfo.ProductInfo support" by Wez · 2 months ago
  37. aea7da9 [fuchsia] Add fuchsia.hwinfo.ProductInfo support by Bryant Chandler · 2 months ago
  38. 25f4373 Remove allow_sched_affinity from seccomp policy since it's not used anymore. by John Abd-El-Malek · 3 months ago
  39. fe11516 Add granular metrics to StartSandboxedProcess by Alex Gough · 3 months ago
  40. 9490152 Enable AAC encoding on macOS 10.13+. by Dale Curtis · 3 months ago
  41. 00c1b21 Remove unused ASL logging code by Avi Drissman · 3 months ago
  42. 14b7f28 Fixes in preparation for the new protobuf by David Benjamin · 3 months ago
  43. 8f570f2 Move //chromeos/{=>ash/components}/assistant [1/N] by Yeunjoo Choi · 3 months ago
  44. 683563f Enable screen AI compilation on Mac by David Tseng · 3 months ago
  45. 8c1ce25 Add os_log support to remoting/ and sandbox/ by Avi Drissman · 3 months ago
  46. f373de6 media: Revert kMediaFoundationCdmData name change by Xiaohan Wang · 3 months ago
  47. 63e9371 Use the lto_visibility_public tag on the TargetPolicy class by Emily Andrews · 3 months ago
  48. 476ccb7 Remove usage of std::iterator in syscall_set.h by Alan Zhao · 3 months ago
  49. dd78ace Detect if suspended renderer process executes code. by Will Harris · 3 months ago
  50. ed1094f SandboxWin::SetJobLevel does not need the command line by Alex Gough · 3 months ago
  51. 41777cf [Fuchsia] Stop using mediacodec.CodecFactory in renderer process by Sergey Ulanov · 3 months ago
  52. 75eae8e [fuchsia] Move //fuchsia/SECURITY_OWNERS to //build by David Dorwin · 3 months ago
  53. efb70ba [fuchsia] Move `os: FUCHSIA` into COMMON_METADATA by David Dorwin · 3 months ago
  54. 9012520 IWYU: Add <algorithm> for std::min in remote_syscall_arg_handler.cc by Ivan Murashov · 3 months ago
  55. c512237 Ensure the seccomp-sigsys crash key is properly allocated. by Robert Sesek · 3 months ago
  56. bab8386 Put bit_cast<>() into the base:: namespace. by Peter Kasting · 3 months ago
  57. 594a5a4 Add RAW_PTR_EXCLUSION annotations to fields by Keishi Hattori · 3 months ago
  58. ce61277 sandbox: Clean up SetupAppContainerProfile() by Xiaohan Wang · 3 months ago
  59. 0ee85e0 [Fuchsia] Switch to the new DebugData service by Chong Gu · 3 months ago
  60. 31ed46b Add ENABLE_SCREEN_AI_SERVICE buildflag for ScreenAI service. by Ramin Halavati · 3 months ago
  61. 38ea46a Reland "Bump minimum version supported for App Container to RS5." by Will Harris · 4 months ago
  62. 39d38e2 Revert "Bump minimum version supported for App Container to RS5." by Vasilii Sukhanov · 4 months ago
  63. a2c279d Bump minimum version supported for App Container to RS5. by Will Harris · 4 months ago
  64. 740964a [fuchsia] Run sub-process FilteredServiceDirectory on its own thread by Fabrice de Gans · 4 months ago
  65. cd7b8fe Annotate NetworkContext with RequireContext= attribute by Alex Gough · 4 months ago
  66. 63b3133 [fuchsia] Change FilteredServiceDirectory API to use a shared_ptr by Fabrice de Gans · 4 months ago
  67. b600ffe media: Allow third party modules in MediaFoundationCdm sandbox by Xiaohan Wang · 4 months ago
  68. f8a1095 Add more launch failure codes for sandboxed process start. by Will Harris · 4 months ago
  69. a51a8d9 Android: Block some Linux Network Block Device ioctls observed in the field. by Robert Sesek · 4 months ago
  70. 707236f Android: Filter 64-bit version of ANDROID_ALARM_GET_TIME(ANDROID_ALARM_ELAPSED_REALTIME) by Robert Sesek · 4 months ago
  71. a193a7a Android: Add seccomp restrictions for ioctl(). by Robert Sesek · 4 months ago
  72. 5bbb98c New toolchain for Windows 10 20348 SDK by Yuly Novikov · 4 months ago
  73. 6fc08af [base] Undo erroneous IWYU of time.h in presence of base::Thread by Gabriel Charette · 4 months ago
  74. 719a8c2 windows: sandbox: Fix DCHECK failure on Windows 8.0 by Marshall Greenblatt · 4 months ago
  75. 6c141be Linux: Fix build error with use_sysroot=false on Ubuntu 18.04 by Marshall Greenblatt · 4 months ago
  76. 5f850f9 Make sandbox policy be std::unique_ptr by Alex Gough · 4 months ago
  77. b0c2dde [Windows] Fix flakey AppContainer test. by James Forshaw · 4 months ago
  78. 25a184d Add IsAppVerifierEnabled and IsAppVerifierLoaded by Bruce Dawson · 5 months ago
  79. f5cf1c3 Allow video decoding sandbox on Linux and ash-chrome. by Andres Calderon Jaramillo · 5 months ago
  80. dcbeca0 Use enum class for JobLevel by Alex Gough · 5 months ago
  81. 8c77523 Revert "[Windows] Add lock around AppContainer profile creation." by James Forshaw · 5 months ago
  82. 74902b0 Don't include ostream in lock_impl.h by Nico Weber · 5 months ago
  83. 7ecaf31 Remove scoped_generic::swap() by Nico Weber · 5 months ago
  84. 6b45341 Don't include ostream in scoped_generic by Nico Weber · 5 months ago
  85. 35a7acc Remove JOB_RESTRICTED from sandbox by Alex Gough · 5 months ago
  86. 1efa4df Move ownership of job to policy by Alex Gough · 5 months ago
  87. d6ec634 [Windows] Add lock around AppContainer profile creation. by James Forshaw · 5 months ago
  88. f27cbab mac: Introduce libaperitif.dylib by Robert Sesek · 5 months ago
  89. e35319d [fuchsia] enable_basic_printing = true by David Dorwin · 5 months ago
  90. 21c196e Only include Windows-specific headers on Windows. by Lei Zhang · 5 months ago
  91. 30f9b99 [Linux sandbox] Correctly handle statx in broker integration tests by Matthew Denton · 5 months ago
  92. a51ab1a Update DCHECK for AddAppContainerProfileToPolicy result by Nicolas Arciniega · 5 months ago
  93. 4000e85 [Linux sandbox] Don't crash on PR_SET_PTRACER by Matthew Denton · 5 months ago
  94. d3b721d Remove unused function GetReservedKeyFromName from win_utils.h by Alex Gough · 5 months ago
  95. 18debb2 WARNING instead of ERROR about sandbox init by Bruce Dawson · 5 months ago
  96. f51ec14 Reland #2: "Implement xHE-AAC decoding via AudioToolbox on macOS 10.15+" by Dale Curtis · 5 months ago
  97. 31e9477 Revert "Reland: "Implement xHE-AAC decoding via AudioToolbox on macOS 10.15+"" by Mark Pearson · 5 months ago
  98. 72b564e Reland: "Implement xHE-AAC decoding via AudioToolbox on macOS 10.15+" by Dale Curtis · 5 months ago
  99. 33fe99d Revert "Implement xHE-AAC decoding via AudioToolbox on macOS 10.15+" by Findit · 5 months ago
  100. 2ad6cde Implement xHE-AAC decoding via AudioToolbox on macOS 10.15+ by Dale Curtis · 5 months ago