summaryrefslogtreecommitdiffstats
path: root/sandbox
Commit message (Expand)AuthorAgeFilesLines
* Linux sandbox: fix part of the *SingleThreaded() APIsjln2015-02-1210-41/+57
* Namespace sandbox: add important security checksjln2015-02-121-1/+3
* Linux Sandbox: reorganizejln2015-02-1240-267/+313
* Deny setgroups if needed before writing to gid_map.rickyz2015-02-115-6/+58
* Sandbox Linux: stricter RunPostTestsChecks()jln2015-02-111-4/+17
* Linux sandbox: fix compile under TSAN.jln2015-02-101-3/+3
* Linux sandbox: Provide AssertSingleThreaded() helperjln2015-02-095-59/+164
* Allow using the namespace sandbox in zygote host.rickyz2015-02-072-1/+14
* Do not close handles in target process on Windows 10.wfh2015-02-071-0/+8
* Revert of Roll Clang 223108:228129 (patchset #5 id:80001 of https://coderevie...tapted2015-02-061-5/+0
* Roll Clang 223108:228129hans2015-02-061-0/+5
* Make chrome.exe built with ASan/Win work with sandbox enabledtimurrrr2015-02-055-18/+132
* sandbox: move SyscallSet into bpf_dslmdempsky2015-02-059-22/+20
* sandbox: extract SetuidSandboxHost code from SetuidSandboxClientmdempsky2015-02-059-271/+368
* sandbox: move Codegen into bpf_dsl directorymdempsky2015-02-0512-17/+17
* Move OpenProcessHandle to Process::Open.rvargas2015-02-041-5/+4
* sandbox: run Credentials.CanDetectRoot as a SANDBOX_TESTmdempsky2015-02-041-5/+5
* Minor refactoring of setuid_sandbox_client.hidehiko2015-02-042-13/+3
* Temporarily disable tests using Credentials::DropFileSystemAccess on ASAN.rickyz2015-02-041-1/+2
* Add namespace sandbox class.rickyz2015-02-0310-12/+329
* Initialize create_disposition to FILE_OPEN in sandboxjschuh2015-01-291-1/+1
* Allow getrusage under ASAN.rickyz2015-01-294-0/+42
* Linux sandbox: disable a few tests on ASANjln2015-01-271-2/+3
* Move a couple of utility functions to a new namespace_utils class.rickyz2015-01-279-42/+210
* Added a new process mitigation to harden process token IL policy.forshaw2015-01-264-1/+91
* Rename base::Process::pid() to Pid()rvargas2015-01-242-4/+4
* Update {virtual,override,final} to follow C++11 style in sandbox, round 2.dcheng2015-01-231-3/+3
* Restrict file creation disposition in Windows sandboxjschuh2015-01-235-13/+42
* Linux sandbox: Make ChrootToSafeEmptyDir() faster.jln2015-01-232-16/+35
* Move ForkWithFlags from process* to launch*.rickyz2015-01-211-1/+1
* Move the test template to //testing/test.gni (part 2)qsr2015-01-213-0/+4
* GN: Add -Wl,-z defs on linux and fix errorsjamesr2015-01-211-0/+1
* Convert DropFileSystemAccess to use ForkWithFlags.rickyz2015-01-162-48/+31
* Sandbox: Re-enable a test that should be working for a long time.rvargas2015-01-141-2/+1
* Move ForkWithFlags from sandbox/ to base/ and plug it into LaunchProcess.rickyz2015-01-133-124/+6
* MultiProcessTest: Update SpawnChild* to return a Process.rvargas2015-01-122-21/+18
* Revert of Linux Sandbox: move init processes to new session id. (patchset #1 ...jln2015-01-122-12/+1
* Fix some sandbox memory leakswfh2015-01-121-10/+8
* Change Credentials to a static class.rickyz2015-01-093-65/+39
* Update {virtual,override,final} for sandbox/ to follow C++11 style.dcheng2015-01-093-3/+3
* Linux Sandbox: move init processes to new session id.jln2015-01-072-1/+12
* Revert of Move ForkWithFlags from sandbox/ to base/ and plug it into LaunchPr...mek2015-01-073-6/+124
* Move ForkWithFlags from sandbox/ to base/ and plug it into LaunchProcess.rickyz2015-01-073-124/+6
* Fix ARM build of sandbox_linux_unittests.mazda2015-01-071-2/+2
* Fix sandbox IPC shared memory leak.jbauman2015-01-071-0/+3
* replace COMPILE_ASSERT with static_assert in sandbox/mostynb2015-01-0617-34/+40
* Remove the open directory fd check.rickyz2015-01-063-14/+13
* Remove deprecated methods from Pickle.avi2014-12-282-8/+5
* Revert of Remove deprecated methods from Pickle. (patchset #10 id:180001 of h...avi2014-12-282-5/+8
* Disable ASan instrumentation for sandbox::(anonymous namespace)::CloneAndLong...glider2014-12-281-0/+7