Figure out sandboxing for mus-gpu |
||||||||
Issue descriptionThe mus gpu process needs to be sandboxed. But it also needs to do some initialization before the sandboxing happens. We need to add some mechanism to allow for a mojo app to do this.
,
Sep 20 2016
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/43aa4f706d6020c93f11fa952d7f1d7a7337c570 commit 43aa4f706d6020c93f11fa952d7f1d7a7337c570 Author: sadrul <sadrul@chromium.org> Date: Tue Sep 20 23:11:51 2016 services/shell: Turn on sandboxing for mojo apps. Turn on sandbox for mojo apps by default. Apps that need to run without a sandbox need to include 'shell:unsandboxed' in their capabilities in manifest for mojo:shell. Update manifests for mojo:ui, mojo:font_service, mojo:file_system, and mojo:leveldb services to include 'shell:unsandboxed'. BUG=645602, 646376 Review-Url: https://codereview.chromium.org/2338793003 Cr-Commit-Position: refs/heads/master@{#419891} [modify] https://crrev.com/43aa4f706d6020c93f11fa952d7f1d7a7337c570/chrome/app/mash/mash_runner.cc [modify] https://crrev.com/43aa4f706d6020c93f11fa952d7f1d7a7337c570/chrome/test/base/mojo_test_connector.cc [modify] https://crrev.com/43aa4f706d6020c93f11fa952d7f1d7a7337c570/components/filesystem/manifest.json [modify] https://crrev.com/43aa4f706d6020c93f11fa952d7f1d7a7337c570/components/font_service/manifest.json [modify] https://crrev.com/43aa4f706d6020c93f11fa952d7f1d7a7337c570/components/leveldb/manifest.json [modify] https://crrev.com/43aa4f706d6020c93f11fa952d7f1d7a7337c570/services/shell/service_manager.cc [modify] https://crrev.com/43aa4f706d6020c93f11fa952d7f1d7a7337c570/services/ui/manifest.json
,
Sep 21 2016
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/b481c6d0540129abef93fb0279634ac4ab33a823 commit b481c6d0540129abef93fb0279634ac4ab33a823 Author: loyso <loyso@chromium.org> Date: Wed Sep 21 01:08:02 2016 Revert of services/shell: Turn on sandboxing for mojo apps. (patchset #9 id:180001 of https://codereview.chromium.org/2338793003/ ) Reason for revert: Causes a timeout on mash_browser_tests. Original issue's description: > services/shell: Turn on sandboxing for mojo apps. > > Turn on sandbox for mojo apps by default. Apps that need to run > without a sandbox need to include 'shell:unsandboxed' in their > capabilities in manifest for mojo:shell. > > Update manifests for mojo:ui, mojo:font_service, mojo:file_system, > and mojo:leveldb services to include 'shell:unsandboxed'. > > BUG=645602, 646376 > > Committed: https://crrev.com/43aa4f706d6020c93f11fa952d7f1d7a7337c570 > Cr-Commit-Position: refs/heads/master@{#419891} TBR=rockot@chromium.org,ben@chromium.org,tsepez@chromium.org,sadrul@chromium.org # Skipping CQ checks because original CL landed less than 1 days ago. NOPRESUBMIT=true NOTREECHECKS=true NOTRY=true BUG=645602, 646376 Review-Url: https://codereview.chromium.org/2353783004 Cr-Commit-Position: refs/heads/master@{#419928} [modify] https://crrev.com/b481c6d0540129abef93fb0279634ac4ab33a823/chrome/app/mash/mash_runner.cc [modify] https://crrev.com/b481c6d0540129abef93fb0279634ac4ab33a823/chrome/test/base/mojo_test_connector.cc [modify] https://crrev.com/b481c6d0540129abef93fb0279634ac4ab33a823/components/filesystem/manifest.json [modify] https://crrev.com/b481c6d0540129abef93fb0279634ac4ab33a823/components/font_service/manifest.json [modify] https://crrev.com/b481c6d0540129abef93fb0279634ac4ab33a823/components/leveldb/manifest.json [modify] https://crrev.com/b481c6d0540129abef93fb0279634ac4ab33a823/services/shell/service_manager.cc [modify] https://crrev.com/b481c6d0540129abef93fb0279634ac4ab33a823/services/ui/manifest.json
,
Dec 7 2016
,
Dec 7 2016
,
Dec 8 2016
I will revive the CL I had landed for this: https://codereview.chromium.org/2338793003/
,
May 29 2017
,
Aug 13
,
Aug 15
Cleaning up old Proj-Mustash labels.
,
Oct 17
|
||||||||
►
Sign in to add a comment |
||||||||
Comment 1 by sadrul@chromium.org
, Sep 14 2016