New issue
Advanced search Search tips

Issue 915910 link

Starred by 5 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 2
Type: Feature



Sign in to add a comment

Sandbox the network service on Mac

Project Member Reported by rsesek@chromium.org, Dec 17

Issue description

This bug tracks bringing up SANDBOX_TYPE_NETWORK on Mac. It'll be a second-level feature of the network service. Enabled with:

--enable-features=NetworkService,NetworkServiceSandbox

Issue 841001 is the equivalent for Windows, and issue 715679 is for Linux.
 
Description: Show this description
Project Member

Comment 2 by bugdroid1@chromium.org, Jan 14

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/34f68f314f4527703c3244430434219227351e41

commit 34f68f314f4527703c3244430434219227351e41
Author: Robert Sesek <rsesek@chromium.org>
Date: Mon Jan 14 20:25:11 2019

Initial Seatbelt profile for the network service sandbox on Mac.

This renames the NetworkServiceWindowsSandbox feature to
NetworkServiceSandbox and uses it for Mac. When it is enabled with
NetworkService, places the network service within the new sandbox profile.

Tbr: jam
Bug: 915910
Change-Id: If02d45625bf7b491fc5ff9984e91d4386a702084
Reviewed-on: https://chromium-review.googlesource.com/c/1380995
Commit-Queue: Robert Sesek <rsesek@chromium.org>
Reviewed-by: Greg Kerr <kerrnel@chromium.org>
Cr-Commit-Position: refs/heads/master@{#622580}
[modify] https://crrev.com/34f68f314f4527703c3244430434219227351e41/chrome/browser/chrome_content_browser_client.cc
[modify] https://crrev.com/34f68f314f4527703c3244430434219227351e41/chrome/browser/chrome_content_browser_client.h
[modify] https://crrev.com/34f68f314f4527703c3244430434219227351e41/content/browser/child_process_launcher_helper_mac.cc
[modify] https://crrev.com/34f68f314f4527703c3244430434219227351e41/content/browser/sandbox_parameters_mac.h
[modify] https://crrev.com/34f68f314f4527703c3244430434219227351e41/content/browser/sandbox_parameters_mac.mm
[modify] https://crrev.com/34f68f314f4527703c3244430434219227351e41/content/public/browser/content_browser_client.cc
[modify] https://crrev.com/34f68f314f4527703c3244430434219227351e41/content/public/browser/content_browser_client.h
[modify] https://crrev.com/34f68f314f4527703c3244430434219227351e41/services/service_manager/sandbox/features.cc
[modify] https://crrev.com/34f68f314f4527703c3244430434219227351e41/services/service_manager/sandbox/features.h
[modify] https://crrev.com/34f68f314f4527703c3244430434219227351e41/services/service_manager/sandbox/mac/BUILD.gn
[add] https://crrev.com/34f68f314f4527703c3244430434219227351e41/services/service_manager/sandbox/mac/network.sb
[modify] https://crrev.com/34f68f314f4527703c3244430434219227351e41/services/service_manager/sandbox/sandbox_type.cc

Labels: knonw
Labels: -knonw Hotlist-KnownIssue

Sign in to add a comment