Sign in
chromium
/
chromium
/
src
/
sandbox
/
HEAD
2c06a0e
Syscall wrappers: Skip LStat test in ChromeOS
by Ryan Borzello
· 16 hours ago
main
4a54ebb
Make the LaCrOS GPU sandbox behave similarly to ash-GPU.
by Andres Calderon Jaramillo
· 4 days ago
c55805a
[Linux sandbox] cleanup TrapRegistry's "atomics"
by Matthew Denton
· 8 days ago
ab3c6a6
Fix output of AppContainerCapabilities on chrome://sandbox
by Alex Gough
· 2 weeks ago
dec0eed
Share LowLevelPolicy between sandboxed processes
by Alex Gough
· 2 weeks ago
67fd715
Add sandbox launcher delegate GetSandboxTag
by Alex Gough
· 2 weeks ago
a80d278
Skeleton for shared backing data for sandbox policies
by Alex Gough
· 3 weeks ago
5dc3580
MTECheckedPtr: Disarm select members
by Kalvin Lee
· 3 weeks ago
0276c3b
Update base::Value list usage in sandbox_policy_diagnostic.cc
by Matt Menke
· 3 weeks ago
b382ce1
Moves subsystem and semantics to enum class
by Alex Gough
· 4 weeks ago
b13d5ba
Reland "Prevent unsafe narrowing: base/ for Linux part 2 of n"
by Peter Kasting
· 4 weeks ago
f49634b
Allowlist syscalls in the Speech Recognition sandbox policy
by evliu
· 4 weeks ago
a2b2c46
Revert "Fix downstream breakage due to dep on :sandbox_linux_unittests"
by Hazem Ashmawy
· 4 weeks ago
66c9720
Revert "[sandbox] Port Linux to use the new sandbox_unittests"
by Henrique Nakashima
· 4 weeks ago
50519ee
Fix downstream breakage due to dep on :sandbox_linux_unittests
by Henrique Nakashima
· 4 weeks ago
546f2b3
[sandbox] Port Linux to use the new sandbox_unittests
by Guocheng Wei
· 4 weeks ago
0a5bc39
Revert "Prevent unsafe narrowing: base/ for Linux part 2 of n"
by Sky Malice
· 4 weeks ago
320eed5
[Cast Convergence] Remove is_chromecast from //sandbox
by David Dorwin
· 4 weeks ago
08857b5
Prevent unsafe narrowing: base/ for Linux part 2 of n
by Peter Kasting
· 5 weeks ago
553dcfe
[sandbox] Port Mac to use the new sandbox_unittests
by Guocheng Wei
· 6 weeks ago
b966f4d
Revert "[fuchsia] Permit PerfettoBridge capabilities for Chrome and WebEngine."
by Wez
· 6 weeks ago
fd3a81c
Create sandbox_unittests target
by Guocheng Wei
· 6 weeks ago
9c4879b
Modernising base::JsonReader to return base::expected
by Claudio DeSouza
· 6 weeks ago
05b38e0
Fix Windows build with enable_plugins=false.
by Lei Zhang
· 7 weeks ago
d956ea1
Fix Mac build with enable_plugins=false.
by Lei Zhang
· 7 weeks ago
88e004c
[fuchsia] Permit PerfettoBridge capabilities for Chrome and WebEngine.
by Kevin Marshall
· 7 weeks ago
bd5c81e
[BRP] Revert some fields in the sandbox from raw_ptr<T> to T*
by Sergei Glazunov
· 7 weeks ago
7918094
Rewrite raw pointer fields to use raw_ptr<T> for linux
by Keishi Hattori
· 7 weeks ago
5dd49a6
Update sandbox exceptions for ChromeScreenAI library.
by Ramin Halavati
· 8 weeks ago
1b2035b
Reland "Reland "[fuchsia] Add fuchsia.hwinfo.ProductInfo support""
by Bryant Chandler
· 8 weeks ago
15abb91
Revert "Reland "[fuchsia] Add fuchsia.hwinfo.ProductInfo support""
by Matt Reichhoff
· 8 weeks ago
123e4cf
Reland "[fuchsia] Add fuchsia.hwinfo.ProductInfo support"
by Bryant Chandler
· 8 weeks ago
e72323d
Remove kerrnel@chromium.org from sandbox/mac/OWNERS.
by Owners Cleanup
· 9 weeks ago
5d67330
Second Reland of "Build TFLite with ruy on all platforms"
by Robert Ogden
· 9 weeks ago
28fc0e1
mac: Add crash keys in content::ChildThreadImpl::IOThreadState::GetTaskPort
by Robert Sesek
· 9 weeks ago
25566a1
Revert "[fuchsia] Add fuchsia.hwinfo.ProductInfo support"
by Wez
· 2 months ago
aea7da9
[fuchsia] Add fuchsia.hwinfo.ProductInfo support
by Bryant Chandler
· 2 months ago
25f4373
Remove allow_sched_affinity from seccomp policy since it's not used anymore.
by John Abd-El-Malek
· 3 months ago
fe11516
Add granular metrics to StartSandboxedProcess
by Alex Gough
· 3 months ago
9490152
Enable AAC encoding on macOS 10.13+.
by Dale Curtis
· 3 months ago
00c1b21
Remove unused ASL logging code
by Avi Drissman
· 3 months ago
14b7f28
Fixes in preparation for the new protobuf
by David Benjamin
· 3 months ago
8f570f2
Move //chromeos/{=>ash/components}/assistant [1/N]
by Yeunjoo Choi
· 3 months ago
683563f
Enable screen AI compilation on Mac
by David Tseng
· 3 months ago
8c1ce25
Add os_log support to remoting/ and sandbox/
by Avi Drissman
· 3 months ago
f373de6
media: Revert kMediaFoundationCdmData name change
by Xiaohan Wang
· 3 months ago
63e9371
Use the lto_visibility_public tag on the TargetPolicy class
by Emily Andrews
· 3 months ago
476ccb7
Remove usage of std::iterator in syscall_set.h
by Alan Zhao
· 3 months ago
dd78ace
Detect if suspended renderer process executes code.
by Will Harris
· 3 months ago
ed1094f
SandboxWin::SetJobLevel does not need the command line
by Alex Gough
· 3 months ago
41777cf
[Fuchsia] Stop using mediacodec.CodecFactory in renderer process
by Sergey Ulanov
· 3 months ago
75eae8e
[fuchsia] Move //fuchsia/SECURITY_OWNERS to //build
by David Dorwin
· 3 months ago
efb70ba
[fuchsia] Move `os: FUCHSIA` into COMMON_METADATA
by David Dorwin
· 3 months ago
9012520
IWYU: Add <algorithm> for std::min in remote_syscall_arg_handler.cc
by Ivan Murashov
· 3 months ago
c512237
Ensure the seccomp-sigsys crash key is properly allocated.
by Robert Sesek
· 3 months ago
bab8386
Put bit_cast<>() into the base:: namespace.
by Peter Kasting
· 3 months ago
594a5a4
Add RAW_PTR_EXCLUSION annotations to fields
by Keishi Hattori
· 3 months ago
ce61277
sandbox: Clean up SetupAppContainerProfile()
by Xiaohan Wang
· 3 months ago
0ee85e0
[Fuchsia] Switch to the new DebugData service
by Chong Gu
· 3 months ago
31ed46b
Add ENABLE_SCREEN_AI_SERVICE buildflag for ScreenAI service.
by Ramin Halavati
· 3 months ago
38ea46a
Reland "Bump minimum version supported for App Container to RS5."
by Will Harris
· 4 months ago
39d38e2
Revert "Bump minimum version supported for App Container to RS5."
by Vasilii Sukhanov
· 4 months ago
a2c279d
Bump minimum version supported for App Container to RS5.
by Will Harris
· 4 months ago
740964a
[fuchsia] Run sub-process FilteredServiceDirectory on its own thread
by Fabrice de Gans
· 4 months ago
cd7b8fe
Annotate NetworkContext with RequireContext= attribute
by Alex Gough
· 4 months ago
63b3133
[fuchsia] Change FilteredServiceDirectory API to use a shared_ptr
by Fabrice de Gans
· 4 months ago
b600ffe
media: Allow third party modules in MediaFoundationCdm sandbox
by Xiaohan Wang
· 4 months ago
f8a1095
Add more launch failure codes for sandboxed process start.
by Will Harris
· 4 months ago
a51a8d9
Android: Block some Linux Network Block Device ioctls observed in the field.
by Robert Sesek
· 4 months ago
707236f
Android: Filter 64-bit version of ANDROID_ALARM_GET_TIME(ANDROID_ALARM_ELAPSED_REALTIME)
by Robert Sesek
· 4 months ago
a193a7a
Android: Add seccomp restrictions for ioctl().
by Robert Sesek
· 4 months ago
5bbb98c
New toolchain for Windows 10 20348 SDK
by Yuly Novikov
· 4 months ago
6fc08af
[base] Undo erroneous IWYU of time.h in presence of base::Thread
by Gabriel Charette
· 4 months ago
719a8c2
windows: sandbox: Fix DCHECK failure on Windows 8.0
by Marshall Greenblatt
· 4 months ago
6c141be
Linux: Fix build error with use_sysroot=false on Ubuntu 18.04
by Marshall Greenblatt
· 4 months ago
5f850f9
Make sandbox policy be std::unique_ptr
by Alex Gough
· 4 months ago
b0c2dde
[Windows] Fix flakey AppContainer test.
by James Forshaw
· 4 months ago
25a184d
Add IsAppVerifierEnabled and IsAppVerifierLoaded
by Bruce Dawson
· 5 months ago
f5cf1c3
Allow video decoding sandbox on Linux and ash-chrome.
by Andres Calderon Jaramillo
· 5 months ago
dcbeca0
Use enum class for JobLevel
by Alex Gough
· 5 months ago
8c77523
Revert "[Windows] Add lock around AppContainer profile creation."
by James Forshaw
· 5 months ago
74902b0
Don't include ostream in lock_impl.h
by Nico Weber
· 5 months ago
7ecaf31
Remove scoped_generic::swap()
by Nico Weber
· 5 months ago
6b45341
Don't include ostream in scoped_generic
by Nico Weber
· 5 months ago
35a7acc
Remove JOB_RESTRICTED from sandbox
by Alex Gough
· 5 months ago
1efa4df
Move ownership of job to policy
by Alex Gough
· 5 months ago
d6ec634
[Windows] Add lock around AppContainer profile creation.
by James Forshaw
· 5 months ago
f27cbab
mac: Introduce libaperitif.dylib
by Robert Sesek
· 5 months ago
e35319d
[fuchsia] enable_basic_printing = true
by David Dorwin
· 5 months ago
21c196e
Only include Windows-specific headers on Windows.
by Lei Zhang
· 5 months ago
30f9b99
[Linux sandbox] Correctly handle statx in broker integration tests
by Matthew Denton
· 5 months ago
a51ab1a
Update DCHECK for AddAppContainerProfileToPolicy result
by Nicolas Arciniega
· 5 months ago
4000e85
[Linux sandbox] Don't crash on PR_SET_PTRACER
by Matthew Denton
· 5 months ago
d3b721d
Remove unused function GetReservedKeyFromName from win_utils.h
by Alex Gough
· 5 months ago
18debb2
WARNING instead of ERROR about sandbox init
by Bruce Dawson
· 5 months ago
f51ec14
Reland #2: "Implement xHE-AAC decoding via AudioToolbox on macOS 10.15+"
by Dale Curtis
· 5 months ago
31e9477
Revert "Reland: "Implement xHE-AAC decoding via AudioToolbox on macOS 10.15+""
by Mark Pearson
· 5 months ago
72b564e
Reland: "Implement xHE-AAC decoding via AudioToolbox on macOS 10.15+"
by Dale Curtis
· 5 months ago
33fe99d
Revert "Implement xHE-AAC decoding via AudioToolbox on macOS 10.15+"
by Findit
· 5 months ago
2ad6cde
Implement xHE-AAC decoding via AudioToolbox on macOS 10.15+
by Dale Curtis
· 5 months ago
Next »