summaryrefslogtreecommitdiffstats
path: root/sandbox
Commit message (Expand)AuthorAgeFilesLines
* Standardize usage of virtual/override/final specifiers.dcheng2014-10-296-114/+111
* Do not cache tokens that have app container SIDswfh2014-10-293-25/+46
* Added support of shared_library build for testsripp2014-10-291-4/+21
* Add a few missing overrides found by a new clang warning.thakis2014-10-291-1/+1
* Further restrict access on the alternate winstation and desktopwfh2014-10-281-4/+8
* SyscallSet: add ValidOnlymdempsky2014-10-284-38/+79
* bpf_dsl: rename SandboxBPFDSLPolicy to just Policymdempsky2014-10-2429-149/+201
* Add Link-Time Optimizations support for Android.fdegans2014-10-231-0/+5
* SyscallIterator: support C++11 range-based for loopsmdempsky2014-10-226-58/+139
* Give PEImage a virtual destructorhans2014-10-221-0/+4
* Standardize usage of virtual/override/final in sandbox/dcheng2014-10-224-22/+20
* Syscall: Fix Syscall::Call's X86-64 implementation for CFI unwindingmdempsky2014-10-202-40/+22
* Disable BaselinePolicy.SIGSYS_InvalidSyscall on Chrome OS.Jorge Lucangeli Obes2014-10-201-0/+3
* bpf_dsl: move more implementation details out of bpf_dsl.hmdempsky2014-10-175-48/+33
* bpf_dsl: add TrapRegistry and extract PolicyCompilermdempsky2014-10-1622-849/+937
* cons: rework API to utilize C++11mdempsky2014-10-154-35/+124
* SyscallIterator: cleanup tests toomdempsky2014-10-141-143/+63
* declare extern template classes soonermostynb2014-10-141-5/+11
* seccomp-bpf: Remove legacy SandboxBPFPolicy classmdempsky2014-10-1416-108/+56
* bpf_dsl: Move {Bool,Result}ExprImpl definition into separate headermdempsky2014-10-145-34/+65
* sandbox_bpf: Remove Traverse method.rickyz2014-10-142-45/+0
* sandbox_bpf: rework how unsafe traps are compiled/verifiedmdempsky2014-10-097-179/+98
* SyscallIterator: refactor internalsmdempsky2014-10-082-73/+62
* replace OVERRIDE and FINAL with override and final in sandbox/mostynb2014-10-0721-127/+127
* Fixes for more MSVC warnings, sandbox/ edition.pkasting2014-10-0433-249/+351
* sandbox_bpf: convert remaining policies to use bpf_dslmdempsky2014-10-045-26/+46
* sandbox: Fix uninitialized data in non-jumping bpf instructionsleecam2014-10-032-23/+22
* Cleanup sandbox/ in advance of re-enabling some MSVC warnings.pkasting2014-10-0210-116/+67
* Rename all isolate_dependency_* to files.maruel2014-10-012-2/+1
* Linux sandbox: Restrict sched_* syscalls on the GPU and ppapi processes.rickyz2014-09-293-10/+14
* Linux sandbox: Allow restricting sched_* on other processes.rickyz2014-09-265-0/+160
* Linux sandbox: fill all parameters when detecting seccomp syscall.Julien Tinnes2014-09-251-12/+9
* Remove implicit HANDLE conversions from sandbox.rvargas2014-09-258-23/+24
* sandbox: Avoid ~(flag1 | flag2 | ...) expressionsmdempsky2014-09-232-15/+14
* sandbox: Convert remaining legacy tests to use policy classesMatthew Dempsky2014-09-2310-186/+169
* Linux sandbox: Remove CodeGen::JoinInstructions.rickyz2014-09-183-65/+25
* [MIPS] Fix seccomp-bpf compile error for MIPSGordana.Cmiljanovic2014-09-171-0/+5
* fix sandbox memory leakcpu2014-09-171-11/+20
* Decouple CodeGen from ErrorCodemdempsky2014-09-174-46/+36
* Large IWYU cleanup for seccomp-bpfmdempsky2014-09-1621-41/+67
* Decouple Trap from ErrorCodemdempsky2014-09-166-103/+105
* Split AssembleFilter into comprehensible chunksmdempsky2014-09-162-149/+205
* Linux sandbox: Disallow get_robust_list and set_robust_list.rickyz2014-09-162-1/+3
* Linux sandbox: restrict clock_gettime() and clock_getres()jln2014-09-133-1/+14
* Convert sandbox_bpf_unittest.cc to use bpf_dslmdempsky2014-09-137-419/+461
* Make "rt" library Linux-only in GN build.Brett Wilson2014-09-121-1/+4
* Add "rt" to libs of GN build linux sandbox unittests.Brett Wilson2014-09-121-0/+2
* Remove --find-inode-switch hack from chrome-sandboxmdempsky2014-09-126-194/+3
* Linux sandbox: fix MIPS Android compilation bug.jln2014-09-121-0/+5
* Cleanup: Use base/files/file_util.h instead of base/file_util.h in [r-t]*/thestig2014-09-127-7/+7