1. 0645958 Revert "Fix sandbox initialization for OnDeviceModelExecution on Linux" by Isaac Ahouma · 3 days ago main
  2. d2bd483 Spanification: Use std::array in sandbox/linux. by Arthur Sonzogni · 3 days ago
  3. bffc7e2 Fix sandbox initialization for OnDeviceModelExecution on Linux by François Doray · 4 days ago
  4. 842e18c [sandbox] Add Basic Process API report skill by Stefan Smolen · 4 days ago
  5. 1e4fde5 Remove redundant UNSAFE_TODO wrappers by Arthur Sonzogni · 4 days ago
  6. 70bb188 Document firewall hole process model and add baseline socket tests by maciek swiech · 4 days ago
  7. 1d5dfa6 webnn: use base tmp dir for compiler process by Phillis Tang · 4 days ago
  8. b916e67 [build] Enable stack clash protection on 64-bit Android by Hans Wennborg · 5 days ago
  9. 3287411 [basic_process] Add a echo service test utilizing basic process APIs by Stefan Smolen · 6 days ago
  10. 2e4668e [macOS] Clean up MacSandboxOdmeUserDirAccess feature by Bryan Oltman · 9 days ago
  11. 3f9e987 Standardize mojom arguments for which bindings are generated by Devon Loehr · 9 days ago
  12. 2fc48a0 Revert "[macOS] Use sandboxed subdirectories for the GPU child process" by Bryan Oltman · 9 days ago
  13. 88f1d43 Remove redundant UNSAFE_TODO wrappers in sandbox/linux by Arthur Sonzogni · 10 days ago
  14. d80ab98 Remove the WinSboxHighGPUJobMemoryLimits feature by Will Harris · 11 days ago
  15. 9ad436b [Stale Flag Cleanup] OutOfProcessVideoDecoding by Bryan Kim · 11 days ago
  16. 70d02cc [macOS] Use sandboxed subdirectories for the GPU child process by Bryan Oltman · 11 days ago
  17. a15191b Clean up supporting code for WinSDK 26100 by Devon Loehr · 12 days ago
  18. 6e90653 [macOS] Remove kMacSandboxNetworkUserDirAccess feature by Bryan Oltman · 12 days ago
  19. 6254e44 Make ssmole@microsoft.com a sandbox/win/owners by Stefan Smolen · 3 weeks ago
  20. 6834a11 Fix unsafe buffer usage in sandbox/linux/services/proc_util.cc by Mahmoud Rashad · 3 weeks ago
  21. 38c6140 sandbox: skip uprobe/uretprobe in SandboxBPF.SyntheticPolicy by utzcoz · 3 weeks ago
  22. 61ba54e Replace KiBU/MiBU/etc with KiB/MiB/etc for sandbox/policy/win by Joe Mason · 4 weeks ago
  23. e7468b2 [net] Remove kAddressTrackerLinuxIsProxied flag by Jeffrey Yu · 4 weeks ago
  24. e3c5d84 Fix unsafe buffer usage in setuid_sandbox_host.cc by Mahmoud Rashad · 4 weeks ago
  25. 7cee0c2 Update sandbox .sb files for a macOS 13 minimum by Avi Drissman · 4 weeks ago
  26. 9fe45cb [macoOS] Removes the kMacSandboxDistributedNotifications feature by Bryan Oltman · 4 weeks ago
  27. 1f39137 Revert "[macOS] Use process-isolated subdirectories for the GPU child process" by Lily Chen · 5 weeks ago
  28. 125c227 [macOS] Use process-isolated subdirectories for the GPU child process by Bryan Oltman · 5 weeks ago
  29. f1b1465 Reland "Reland "[mac] Enable aperitif on helper executables."" by Yue She · 5 weeks ago
  30. 9e38a92 Revert "Reland "[mac] Enable aperitif on helper executables."" by Volodymyr Plotkin · 5 weeks ago
  31. 618789c webnn: setup coreml compiler sandbox rules by Phillis Tang · 5 weeks ago
  32. c45c430 Reland "[mac] Enable aperitif on helper executables." by Liza Burakova · 6 weeks ago
  33. 297ca3f Revert "[mac] Enable aperitif on helper executables." by Adem Derinel · 6 weeks ago
  34. 22990fe [mac] Enable aperitif on helper executables. by Liza Burakova · 6 weeks ago
  35. 9c8b324 Fix include guard presubmit warnings by Victor Hugo Vianna Silva · 7 weeks ago
  36. 25aab98 Revert "[macOS] Use process-isolated subdirectories for the GPU child process" by Aliaksei Bahdzevich · 7 weeks ago
  37. fcac155 [macOS] Use process-isolated subdirectories for the GPU child process by Bryan Oltman · 7 weeks ago
  38. 2ac1ce3 Revert "Remove file-issue-extension permission from gpu seatbelt profile" by Bryan Oltman · 7 weeks ago
  39. 727326f Start loading msdia140.dll when loading dbghelp.dll by Devon Loehr · 8 weeks ago
  40. a9e64af Add GRO to fieldtrial_testing_config by Mohannad Farrag · 8 weeks ago
  41. 8f54579 Enable WinSboxModuleTamperingProtection by default by Will Harris · 8 weeks ago
  42. af0b56a [unsafe-buffers] Update allow_unsafe_buffers in sandbox/ SUID C files by Arthur Sonzogni · 8 weeks ago
  43. 8dcfa32 [sandbox/linux] Fix directory traversal vulnerability by Greg Thompson · 8 weeks ago
  44. 86344cd Enable WinSboxHighGPUJobMemoryLimits by default by Will Harris · 8 weeks ago
  45. 997a324 [finch] Remove the three-argument BASE_FEATURE macro everywhere it is by Julia Hansbrough · 9 weeks ago
  46. 361c10d Remove file-issue-extension permission from gpu seatbelt profile by Bryan Oltman · 9 weeks ago
  47. b061f8b [sandbox/linux] Fix off-by-one DCHECK in BrokerSimpleMessage::WriteBytes by Karim El Harim · 10 weeks ago
  48. a663ede media: make enable of v4l2/vaapi on linux possible by Jianfeng Liu · 2 months ago
  49. 37c67f3 [unsafe-buffers] Sandbox: Use std::array in baseline_policy_unittest by Arthur Sonzogni · 2 months ago
  50. 91b71b3 Fix unsafe buffer usage in seccomp_broker_process_unittest.cc by Joshua Peraza · 2 months ago
  51. 3e19954 [unsafe-buffers] Remove allow_unsafe_buffers from sandbox/ by Arthur Sonzogni · 2 months ago
  52. 588d321 Clean up: Fix 5 wrong escapes in 1 DEPS files in sandbox by yoshiki iguchi · 3 months ago
  53. 72d1933 Fix macOS 27 build of `chrome` target by Victor Hugo Vianna Silva · 3 months ago
  54. c83dc79 Add UNSAFE_BUFFERS macros to C API calls. by Liza Burakova · 3 months ago
  55. 6d5856b WebNN: Add a dedicated flag to disable the WebNN compiler process sandbox by mingmingtasd · 3 months ago
  56. b004489 Reland "Fix Javaless Renderer bugs" by Sam Maier · 3 months ago
  57. 7868c25 Revert "Fix Javaless Renderer bugs" by luci-bisection@appspot.gserviceaccount.com · 3 months ago
  58. 8606397 Fix Javaless Renderer bugs by Sam Maier · 3 months ago
  59. 90bdb71 WebNN: Align WebNN Compiler job memory limit with the renderer process by mingmingtasd · 3 months ago
  60. 4273744 sandbox: Allow recvmmsg in seccomp sandbox on Linux by Mohannad Farrag · 3 months ago
  61. a9d727a [macOS] Guard ODME process directory access behind flag by Bryan Oltman · 3 months ago
  62. 859a487 [macOS] Guard network process directory access behind flag by Bryan Oltman · 3 months ago
  63. 18a3f72 [WebNN] Tighten model-compilation utility sandbox to USER_LOCKDOWN by Rafael Cintron · 3 months ago
  64. 974cb22 fix: UsePerformanceHelper affinity mode by Richard Townsend · 3 months ago
  65. db7ad29 Remove code supporting macOS 12 from sandbox by Avi Drissman · 3 months ago
  66. 0bc587e Harden Speech Recognition Utility Process Sandbox on Windows by Evan Liu · 4 months ago
  67. 43b6b0c [tracing] Migrate async track events to more appropriate alternatives in sandbox/win by Etienne Pierre-doray · 4 months ago
  68. b97abb9 Migrate SysInfo::AmountOfPhysicalMemory callers to AmountOfTotalPhysicalMemory in sandbox/policy/win by Joe Mason · 4 months ago
  69. 7596fc4 fix: remove incorrect flag from sandbox/ test by Richard Townsend · 4 months ago
  70. 026845c Disable BaselinePolicyAndroid.SchedSetAffinity_Maybe_Allowed by Masa Fujita · 4 months ago
  71. ea341c6 [Gardener] Disable SchedGetAffinity_Maybe_Allowed test. by Filipa Senra · 4 months ago
  72. 534adc7 Revert "[Gardening] Fix BaselinePolicyAndroid affinity test" by Ivana Žužić · 4 months ago
  73. 9c0871b [Gardening] Fix BaselinePolicyAndroid affinity test by Ivana Žužić · 4 months ago
  74. d7337e5 Remove setPreferPowerEfficiency experiment by Richard Townsend · 4 months ago
  75. 4c39da1 Migrate SysInfo::AmountOfPhysicalMemory callers to AmountOfTotalPhysicalMemory in sandbox/policy/linux by Joe Mason · 4 months ago
  76. d197319 [macOS] Deny distributed notifications in the renderer sandbox by Bryan Oltman · 4 months ago
  77. d407c40 Run `gn format` on all BUILD.gn files. by Matt Stark · 4 months ago
  78. 1ec9592 Move test-only GetNtPathFromWin32Path into test file by Emily Stark · 4 months ago
  79. 272ebff Reland "Fix mmap seccomp policy in speech recognition sandbox" by Andrew Paseltiner · 5 months ago
  80. f8acb8c Revert "Fix mmap seccomp policy in speech recognition sandbox" by Ian Wells · 5 months ago
  81. 37259f7 Fix mmap seccomp policy in speech recognition sandbox by Andrew Paseltiner · 5 months ago
  82. d072df6 WebNN: Add kWebNNModelCompilation sandbox type by mingmingtasd · 5 months ago
  83. 2c9c12e seccomp: Add a test to ensure long term feature detection by Primiano Tucci · 5 months ago
  84. 0b13e47 [sandbox] Fix SYS_SECCOMP conflict with newer glibc by Ho Cheung · 5 months ago
  85. 3c404be Reland "Remove dependency on ATL Security objects" by Chris Davis · 5 months ago
  86. 2492a93 [sandbox] Enable Module Tampering Protection for CIG processes by Klaus · 5 months ago
  87. 5d45cbe Revert "Remove dependency on ATL Security objects" by Justin Lulejian · 5 months ago
  88. d6ded81 Remove dependency on ATL Security objects by Chris Davis · 5 months ago
  89. 9da15ab Allow PI futex operations on Android in the sandbox. by Primiano Tucci · 5 months ago
  90. 68cd6a7 Add akhna & ellyjones to sandbox/linux/OWNERS by Alex Gough · 5 months ago
  91. 597bd6b [Sandbox] Add a feature to remove the job memory limit for GPU by Jiawei Shao · 6 months ago
  92. 9bba534 Fix various IWYU errors related to base/logging.h by Daniel Cheng · 6 months ago
  93. 37aaf1a [sandbox] Update seccomp-bpf filters for arm64 glibc by Tom Anderson · 6 months ago
  94. 68f7598 [task] Inject ThreadDelegate through Thread constructor by Etienne Pierre-doray · 6 months ago
  95. 815e874 Cleanup: Remove histogram macros header includes in sandbox by Alexei Svitkine · 6 months ago
  96. 2ee2cbb Tighten macOS GPU sandbox restrictions by Dale Curtis · 6 months ago
  97. eb6cc9a Revert "Reland "Enable network sandbox by default on Windows"" by Will Harris · 6 months ago
  98. 0bbf2e0 [Windows] Remove legacy TestRunner code from the sandbox tests. by James Forshaw · 6 months ago
  99. e2a5f67 Reland "Enable network sandbox by default on Windows" by Will Harris · 6 months ago
  100. ab1e3e9 Convert to UNSAFE_TODO in sandbox by Arthur Sonzogni · 6 months ago