| Commit message (Expand) | Author | Age | Files | Lines |
* | Check alternate desktop before applying integrity label | jschuh | 2014-11-07 | 1 | -1/+1 |
* | CodeGen: refactor unit tests using parameterized tests | mdempsky | 2014-11-03 | 1 | -173/+152 |
* | Linux sandbox: refactor BrokerProcess class | jln | 2014-11-01 | 17 | -604/+942 |
* | sandbox: extract PrintProgram() into a separate DumpBPF class | mdempsky | 2014-10-31 | 7 | -95/+130 |
* | Standardize usage of virtual/override/final specifiers. | dcheng | 2014-10-29 | 6 | -114/+111 |
* | Do not cache tokens that have app container SIDs | wfh | 2014-10-29 | 3 | -25/+46 |
* | Added support of shared_library build for tests | ripp | 2014-10-29 | 1 | -4/+21 |
* | Add a few missing overrides found by a new clang warning. | thakis | 2014-10-29 | 1 | -1/+1 |
* | Further restrict access on the alternate winstation and desktop | wfh | 2014-10-28 | 1 | -4/+8 |
* | SyscallSet: add ValidOnly | mdempsky | 2014-10-28 | 4 | -38/+79 |
* | bpf_dsl: rename SandboxBPFDSLPolicy to just Policy | mdempsky | 2014-10-24 | 29 | -149/+201 |
* | Add Link-Time Optimizations support for Android. | fdegans | 2014-10-23 | 1 | -0/+5 |
* | SyscallIterator: support C++11 range-based for loops | mdempsky | 2014-10-22 | 6 | -58/+139 |
* | Give PEImage a virtual destructor | hans | 2014-10-22 | 1 | -0/+4 |
* | Standardize usage of virtual/override/final in sandbox/ | dcheng | 2014-10-22 | 4 | -22/+20 |
* | Syscall: Fix Syscall::Call's X86-64 implementation for CFI unwinding | mdempsky | 2014-10-20 | 2 | -40/+22 |
* | Disable BaselinePolicy.SIGSYS_InvalidSyscall on Chrome OS. | Jorge Lucangeli Obes | 2014-10-20 | 1 | -0/+3 |
* | bpf_dsl: move more implementation details out of bpf_dsl.h | mdempsky | 2014-10-17 | 5 | -48/+33 |
* | bpf_dsl: add TrapRegistry and extract PolicyCompiler | mdempsky | 2014-10-16 | 22 | -849/+937 |
* | cons: rework API to utilize C++11 | mdempsky | 2014-10-15 | 4 | -35/+124 |
* | SyscallIterator: cleanup tests too | mdempsky | 2014-10-14 | 1 | -143/+63 |
* | declare extern template classes sooner | mostynb | 2014-10-14 | 1 | -5/+11 |
* | seccomp-bpf: Remove legacy SandboxBPFPolicy class | mdempsky | 2014-10-14 | 16 | -108/+56 |
* | bpf_dsl: Move {Bool,Result}ExprImpl definition into separate header | mdempsky | 2014-10-14 | 5 | -34/+65 |
* | sandbox_bpf: Remove Traverse method. | rickyz | 2014-10-14 | 2 | -45/+0 |
* | sandbox_bpf: rework how unsafe traps are compiled/verified | mdempsky | 2014-10-09 | 7 | -179/+98 |
* | SyscallIterator: refactor internals | mdempsky | 2014-10-08 | 2 | -73/+62 |
* | replace OVERRIDE and FINAL with override and final in sandbox/ | mostynb | 2014-10-07 | 21 | -127/+127 |
* | Fixes for more MSVC warnings, sandbox/ edition. | pkasting | 2014-10-04 | 33 | -249/+351 |
* | sandbox_bpf: convert remaining policies to use bpf_dsl | mdempsky | 2014-10-04 | 5 | -26/+46 |
* | sandbox: Fix uninitialized data in non-jumping bpf instructions | leecam | 2014-10-03 | 2 | -23/+22 |
* | Cleanup sandbox/ in advance of re-enabling some MSVC warnings. | pkasting | 2014-10-02 | 10 | -116/+67 |
* | Rename all isolate_dependency_* to files. | maruel | 2014-10-01 | 2 | -2/+1 |
* | Linux sandbox: Restrict sched_* syscalls on the GPU and ppapi processes. | rickyz | 2014-09-29 | 3 | -10/+14 |
* | Linux sandbox: Allow restricting sched_* on other processes. | rickyz | 2014-09-26 | 5 | -0/+160 |
* | Linux sandbox: fill all parameters when detecting seccomp syscall. | Julien Tinnes | 2014-09-25 | 1 | -12/+9 |
* | Remove implicit HANDLE conversions from sandbox. | rvargas | 2014-09-25 | 8 | -23/+24 |
* | sandbox: Avoid ~(flag1 | flag2 | ...) expressions | mdempsky | 2014-09-23 | 2 | -15/+14 |
* | sandbox: Convert remaining legacy tests to use policy classes | Matthew Dempsky | 2014-09-23 | 10 | -186/+169 |
* | Linux sandbox: Remove CodeGen::JoinInstructions. | rickyz | 2014-09-18 | 3 | -65/+25 |
* | [MIPS] Fix seccomp-bpf compile error for MIPS | Gordana.Cmiljanovic | 2014-09-17 | 1 | -0/+5 |
* | fix sandbox memory leak | cpu | 2014-09-17 | 1 | -11/+20 |
* | Decouple CodeGen from ErrorCode | mdempsky | 2014-09-17 | 4 | -46/+36 |
* | Large IWYU cleanup for seccomp-bpf | mdempsky | 2014-09-16 | 21 | -41/+67 |
* | Decouple Trap from ErrorCode | mdempsky | 2014-09-16 | 6 | -103/+105 |
* | Split AssembleFilter into comprehensible chunks | mdempsky | 2014-09-16 | 2 | -149/+205 |
* | Linux sandbox: Disallow get_robust_list and set_robust_list. | rickyz | 2014-09-16 | 2 | -1/+3 |
* | Linux sandbox: restrict clock_gettime() and clock_getres() | jln | 2014-09-13 | 3 | -1/+14 |
* | Convert sandbox_bpf_unittest.cc to use bpf_dsl | mdempsky | 2014-09-13 | 7 | -419/+461 |
* | Make "rt" library Linux-only in GN build. | Brett Wilson | 2014-09-12 | 1 | -1/+4 |