New issue
Advanced search Search tips

Issue 891949 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
Closed: Dec 6
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug



Sign in to add a comment

Make shill sandboxing default-disabled on M70

Project Member Reported by mortonm@chromium.org, Oct 4

Issue description

https://chromium-review.googlesource.com/c/chromiumos/platform2/+/1251883 needs to be merged back to M70 (plus a follow up CL once Chrome PFQ passes). This will help us completely turn sandboxing off on M70 through Finch configs if need be.
 
Project Member

Comment 1 by sheriffbot@chromium.org, Oct 4

Labels: -Merge-Request-70 Merge-Review-70 Hotlist-Merge-Review
This bug requires manual review: We are only 11 days from stable.
Please contact the milestone owner if you have questions.
Owners: benmason@(Android), kariahda@(iOS), geohsu@(ChromeOS), abdulsyed@(Desktop)

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: -Merge-Review-70 Merge-Approved-70
Project Member

Comment 3 by bugdroid1@chromium.org, Oct 4

Labels: merge-merged-release-R70-11021.B
The following revision refers to this bug:
  https://chromium.googlesource.com/aosp/platform/system/connectivity/shill/+/0dae561acbf416b7e63aab63c8c3ec6c831c9756

commit 0dae561acbf416b7e63aab63c8c3ec6c831c9756
Author: Micah Morton <mortonm@chromium.org>
Date: Thu Oct 04 16:27:28 2018

shill: modify init script for sandboxing kill switch

NOTE: this is a cherry pick of CL:1251883 to M70, with the exception
that we don't hard-code shill.sh to always run shill as root. We don't
need to do that, since the ShillSandboxing flag is default disabled
in M70 now.

Modify these scripts to allow for shill to be run as root by default
and only run in a sandbox when the ShillSandboxing flag is enabled in
Chrome.

BUG= chromium:891949 ,chromium:649417
TEST=scp the files over to M70 beta image and reboot while
enabling/disabling flag in /etc/chrome-dev.conf

Change-Id: I106408a80bc7f02d50d19693b918380102ed3fe2

[modify] https://crrev.com/0dae561acbf416b7e63aab63c8c3ec6c831c9756/init/shill-sandboxing-kill-switch.conf
[modify] https://crrev.com/0dae561acbf416b7e63aab63c8c3ec6c831c9756/init/shill.sh

Project Member

Comment 4 by sheriffbot@chromium.org, Oct 8

This issue has been approved for a merge. Please merge the fix to any appropriate branches as soon as possible!

If all merges have been completed, please remove any remaining Merge-Approved labels from this issue.

Thanks for your time! To disable nags, add the Disable-Nags label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 5 by sheriffbot@chromium.org, Oct 12

This issue has been approved for a merge. Please merge the fix to any appropriate branches as soon as possible!

If all merges have been completed, please remove any remaining Merge-Approved labels from this issue.

Thanks for your time! To disable nags, add the Disable-Nags label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 6 by sheriffbot@chromium.org, Nov 23

Labels: -Merge-Approved-70
This issue hasn't been updated in the last 6 weeks, so removing its merge approval label. Please re-request a merge if needed.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: -Hotlist-Merge-Review Merge-Merged-70
Status: Fixed (was: Untriaged)
Long past where this matters...but I think this was done.

Sign in to add a comment