1. 9a479b2 [fuchsia][starview] Add sandbox, mojo, and ipc test filter files by zijiehe-google-com · 3 days ago main
  2. 4b65535 [sandbox] Disable Clang modules for the Basic Process API shim by Stefan Smolen · 3 days ago
  3. 116faa0 Add CancelIOEx and SetConsoleMode to basic sandbox shim by Stefan Smolen · 3 days ago
  4. 218ba74 [Code Health] Spanify Ld() in sandbox/linux/bpf_dsl/verifier.cc by Ali Hijazi · 4 days ago
  5. 8ca1633 nearby: Remove kNearbyPresence feature flag and remaining references by Satoru Takabayashi · 7 days ago
  6. b0631da Add bryanoltman@ to //sandbox/mac/OWNERS by Bryan Oltman · 10 days ago
  7. 76eee50 [macOS] Restrict WebNN permissions in GPU sandbox by Bryan Oltman · 11 days ago
  8. 383c48d [Linux] Report why the setuid sandbox helper failed to launch the zygote by Tom Anderson · 12 days ago
  9. fefbfb5 Reland "Migrate base::Reversed to std::views::reverse" by Jan Wilken Dörrie · 13 days ago
  10. 3bdf847 Revert "Migrate base::Reversed to std::views::reverse" by Atharv Maan · 13 days ago
  11. 70971e7 Migrate base::Reversed to std::views::reverse by Jan Wilken Dörrie · 13 days ago
  12. 0724881 Add MacSandboxLogging feature by Bryan Oltman · 3 weeks ago
  13. 059c6f8 [iOS/tvOS] Enable kWebNNModelCompilation sandbox type on iOS by Gyuyoung Kim · 3 weeks ago
  14. af262e1 Reland "vr: run the XR device service in the sandbox on Linux" by utzcoz · 3 weeks ago
  15. 22b504f [fuchsia] Provide RoleManager to all sandboxed child processes by Guocheng Wei · 3 weeks ago
  16. cf69254 Add Sandbox::kPlatformRuntime utility sandbox type by Marwan Tammam · 4 weeks ago
  17. cd0cafe [basic sandbox] Add APIs missing from basic_sandbox.def by Stefan Smolen · 4 weeks ago
  18. edd4fc6 [macOS] Restrict GPU process's Darwin user dir access by Bryan Oltman · 4 weeks ago
  19. 57fffeb presubmit: Fast-path nested PRESUBMITs in subsystems (part 8 of 8) by James Hawkins · 4 weeks ago
  20. 46d0eb0 linux sandbox: Reject sys_old_mmap on i386 in baseline policy by Matthew Denton · 4 weeks ago
  21. 2930833 Revert "vr: run the XR device service in the sandbox on Linux" by Dibyajyoti Pal · 4 weeks ago
  22. dbf2bb8 vr: run the XR device service in the sandbox on Linux by utzcoz · 4 weeks ago
  23. 0645958 Revert "Fix sandbox initialization for OnDeviceModelExecution on Linux" by Isaac Ahouma · 4 weeks ago
  24. d2bd483 Spanification: Use std::array in sandbox/linux. by Arthur Sonzogni · 4 weeks ago
  25. bffc7e2 Fix sandbox initialization for OnDeviceModelExecution on Linux by François Doray · 5 weeks ago
  26. 842e18c [sandbox] Add Basic Process API report skill by Stefan Smolen · 5 weeks ago
  27. 1e4fde5 Remove redundant UNSAFE_TODO wrappers by Arthur Sonzogni · 5 weeks ago
  28. 70bb188 Document firewall hole process model and add baseline socket tests by maciek swiech · 5 weeks ago
  29. 1d5dfa6 webnn: use base tmp dir for compiler process by Phillis Tang · 5 weeks ago
  30. b916e67 [build] Enable stack clash protection on 64-bit Android by Hans Wennborg · 5 weeks ago
  31. 3287411 [basic_process] Add a echo service test utilizing basic process APIs by Stefan Smolen · 5 weeks ago
  32. 2e4668e [macOS] Clean up MacSandboxOdmeUserDirAccess feature by Bryan Oltman · 5 weeks ago
  33. 3f9e987 Standardize mojom arguments for which bindings are generated by Devon Loehr · 5 weeks ago
  34. 2fc48a0 Revert "[macOS] Use sandboxed subdirectories for the GPU child process" by Bryan Oltman · 5 weeks ago
  35. 88f1d43 Remove redundant UNSAFE_TODO wrappers in sandbox/linux by Arthur Sonzogni · 6 weeks ago
  36. d80ab98 Remove the WinSboxHighGPUJobMemoryLimits feature by Will Harris · 6 weeks ago
  37. 9ad436b [Stale Flag Cleanup] OutOfProcessVideoDecoding by Bryan Kim · 6 weeks ago
  38. 70d02cc [macOS] Use sandboxed subdirectories for the GPU child process by Bryan Oltman · 6 weeks ago
  39. a15191b Clean up supporting code for WinSDK 26100 by Devon Loehr · 6 weeks ago
  40. 6e90653 [macOS] Remove kMacSandboxNetworkUserDirAccess feature by Bryan Oltman · 6 weeks ago
  41. 6254e44 Make ssmole@microsoft.com a sandbox/win/owners by Stefan Smolen · 7 weeks ago
  42. 6834a11 Fix unsafe buffer usage in sandbox/linux/services/proc_util.cc by Mahmoud Rashad · 7 weeks ago
  43. 38c6140 sandbox: skip uprobe/uretprobe in SandboxBPF.SyntheticPolicy by utzcoz · 7 weeks ago
  44. 61ba54e Replace KiBU/MiBU/etc with KiB/MiB/etc for sandbox/policy/win by Joe Mason · 8 weeks ago
  45. e7468b2 [net] Remove kAddressTrackerLinuxIsProxied flag by Jeffrey Yu · 8 weeks ago
  46. e3c5d84 Fix unsafe buffer usage in setuid_sandbox_host.cc by Mahmoud Rashad · 8 weeks ago
  47. 7cee0c2 Update sandbox .sb files for a macOS 13 minimum by Avi Drissman · 8 weeks ago
  48. 9fe45cb [macoOS] Removes the kMacSandboxDistributedNotifications feature by Bryan Oltman · 8 weeks ago
  49. 1f39137 Revert "[macOS] Use process-isolated subdirectories for the GPU child process" by Lily Chen · 9 weeks ago
  50. 125c227 [macOS] Use process-isolated subdirectories for the GPU child process by Bryan Oltman · 9 weeks ago
  51. f1b1465 Reland "Reland "[mac] Enable aperitif on helper executables."" by Yue She · 9 weeks ago
  52. 9e38a92 Revert "Reland "[mac] Enable aperitif on helper executables."" by Volodymyr Plotkin · 10 weeks ago
  53. 618789c webnn: setup coreml compiler sandbox rules by Phillis Tang · 10 weeks ago
  54. c45c430 Reland "[mac] Enable aperitif on helper executables." by Liza Burakova · 10 weeks ago
  55. 297ca3f Revert "[mac] Enable aperitif on helper executables." by Adem Derinel · 10 weeks ago
  56. 22990fe [mac] Enable aperitif on helper executables. by Liza Burakova · 2 months ago
  57. 9c8b324 Fix include guard presubmit warnings by Victor Hugo Vianna Silva · 3 months ago
  58. 25aab98 Revert "[macOS] Use process-isolated subdirectories for the GPU child process" by Aliaksei Bahdzevich · 3 months ago
  59. fcac155 [macOS] Use process-isolated subdirectories for the GPU child process by Bryan Oltman · 3 months ago
  60. 2ac1ce3 Revert "Remove file-issue-extension permission from gpu seatbelt profile" by Bryan Oltman · 3 months ago
  61. 727326f Start loading msdia140.dll when loading dbghelp.dll by Devon Loehr · 3 months ago
  62. a9e64af Add GRO to fieldtrial_testing_config by Mohannad Farrag · 3 months ago
  63. 8f54579 Enable WinSboxModuleTamperingProtection by default by Will Harris · 3 months ago
  64. af0b56a [unsafe-buffers] Update allow_unsafe_buffers in sandbox/ SUID C files by Arthur Sonzogni · 3 months ago
  65. 8dcfa32 [sandbox/linux] Fix directory traversal vulnerability by Greg Thompson · 3 months ago
  66. 86344cd Enable WinSboxHighGPUJobMemoryLimits by default by Will Harris · 3 months ago
  67. 997a324 [finch] Remove the three-argument BASE_FEATURE macro everywhere it is by Julia Hansbrough · 3 months ago
  68. 361c10d Remove file-issue-extension permission from gpu seatbelt profile by Bryan Oltman · 3 months ago
  69. b061f8b [sandbox/linux] Fix off-by-one DCHECK in BrokerSimpleMessage::WriteBytes by Karim El Harim · 3 months ago
  70. a663ede media: make enable of v4l2/vaapi on linux possible by Jianfeng Liu · 3 months ago
  71. 37c67f3 [unsafe-buffers] Sandbox: Use std::array in baseline_policy_unittest by Arthur Sonzogni · 3 months ago
  72. 91b71b3 Fix unsafe buffer usage in seccomp_broker_process_unittest.cc by Joshua Peraza · 3 months ago
  73. 3e19954 [unsafe-buffers] Remove allow_unsafe_buffers from sandbox/ by Arthur Sonzogni · 3 months ago
  74. 588d321 Clean up: Fix 5 wrong escapes in 1 DEPS files in sandbox by yoshiki iguchi · 4 months ago
  75. 72d1933 Fix macOS 27 build of `chrome` target by Victor Hugo Vianna Silva · 4 months ago
  76. c83dc79 Add UNSAFE_BUFFERS macros to C API calls. by Liza Burakova · 4 months ago
  77. 6d5856b WebNN: Add a dedicated flag to disable the WebNN compiler process sandbox by mingmingtasd · 4 months ago
  78. b004489 Reland "Fix Javaless Renderer bugs" by Sam Maier · 4 months ago
  79. 7868c25 Revert "Fix Javaless Renderer bugs" by luci-bisection@appspot.gserviceaccount.com · 4 months ago
  80. 8606397 Fix Javaless Renderer bugs by Sam Maier · 4 months ago
  81. 90bdb71 WebNN: Align WebNN Compiler job memory limit with the renderer process by mingmingtasd · 4 months ago
  82. 4273744 sandbox: Allow recvmmsg in seccomp sandbox on Linux by Mohannad Farrag · 4 months ago
  83. a9d727a [macOS] Guard ODME process directory access behind flag by Bryan Oltman · 4 months ago
  84. 859a487 [macOS] Guard network process directory access behind flag by Bryan Oltman · 4 months ago
  85. 18a3f72 [WebNN] Tighten model-compilation utility sandbox to USER_LOCKDOWN by Rafael Cintron · 4 months ago
  86. 974cb22 fix: UsePerformanceHelper affinity mode by Richard Townsend · 4 months ago
  87. db7ad29 Remove code supporting macOS 12 from sandbox by Avi Drissman · 4 months ago
  88. 0bc587e Harden Speech Recognition Utility Process Sandbox on Windows by Evan Liu · 5 months ago
  89. 43b6b0c [tracing] Migrate async track events to more appropriate alternatives in sandbox/win by Etienne Pierre-doray · 5 months ago
  90. b97abb9 Migrate SysInfo::AmountOfPhysicalMemory callers to AmountOfTotalPhysicalMemory in sandbox/policy/win by Joe Mason · 5 months ago
  91. 7596fc4 fix: remove incorrect flag from sandbox/ test by Richard Townsend · 5 months ago
  92. 026845c Disable BaselinePolicyAndroid.SchedSetAffinity_Maybe_Allowed by Masa Fujita · 5 months ago
  93. ea341c6 [Gardener] Disable SchedGetAffinity_Maybe_Allowed test. by Filipa Senra · 5 months ago
  94. 534adc7 Revert "[Gardening] Fix BaselinePolicyAndroid affinity test" by Ivana Žužić · 5 months ago
  95. 9c0871b [Gardening] Fix BaselinePolicyAndroid affinity test by Ivana Žužić · 5 months ago
  96. d7337e5 Remove setPreferPowerEfficiency experiment by Richard Townsend · 5 months ago
  97. 4c39da1 Migrate SysInfo::AmountOfPhysicalMemory callers to AmountOfTotalPhysicalMemory in sandbox/policy/linux by Joe Mason · 5 months ago
  98. d197319 [macOS] Deny distributed notifications in the renderer sandbox by Bryan Oltman · 5 months ago
  99. d407c40 Run `gn format` on all BUILD.gn files. by Matt Stark · 5 months ago
  100. 1ec9592 Move test-only GetNtPathFromWin32Path into test file by Emily Stark · 5 months ago