atrusd: revise minijail0 flags |
|||
Issue descriptionDuring the latest reviews on atrusctl we got some comments on the minijail0 flags currently used. We should revise the flags and see if we can lock it down even more.
,
Jul 6 2017
The following revision refers to this bug: https://chromium.googlesource.com/chromiumos/third_party/atrusctl/+/85a2e7c0c0b7317a48928c93efea41dfcf6c8bcd commit 85a2e7c0c0b7317a48928c93efea41dfcf6c8bcd Author: Emil Lundmark <lndmrk@chromium.org> Date: Thu Jul 06 16:49:25 2017 Lock down further with minijail0 This adds a new bunch of flags to minijail0, hopefully reducing the attack surface of the program even more. BUG= chromium:737504 TEST=Ran a test involving firmware upgrade and diagnostics. Also verified that audio was available in kiosk mode. Change-Id: I2136608f2f5569b4b4d39a3a650a0475feb39c93 Reviewed-on: https://chromium-review.googlesource.com/558345 Commit-Ready: Emil Lundmark <lndmrk@chromium.org> Tested-by: Emil Lundmark <lndmrk@chromium.org> Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org> [modify] https://crrev.com/85a2e7c0c0b7317a48928c93efea41dfcf6c8bcd/init/atrusd.conf
,
Jul 7 2017
,
Jul 18 2017
|
|||
►
Sign in to add a comment |
|||
Comment 1 by lndmrk@chromium.org
, Jun 28 2017