summaryrefslogtreecommitdiffstats
path: root/sandbox
Commit message (Expand)AuthorAgeFilesLines
* Add a syscall wrapper for prlimit64.rickyz2014-12-093-3/+19
* Fix format string to handle pointers correctly.brucedawson2014-12-061-2/+4
* Fix some minor typos: abandonned -> abandonedsungmann.cho2014-12-052-2/+2
* [Android] Get renderers working again under seccomp-bpf.rsesek2014-12-041-0/+13
* gn format // (the rest, except mojo)scottmg2014-12-034-23/+40
* sandbox: sandbox_linux_unittests enforces TSYNC on ChromeOSleecam2014-12-031-2/+12
* Revert "Disable SANDBOX_*_TEST on ChromeOS"leecam2014-12-021-3/+0
* sandbox: Fix DeathMessage so CHECK messages are caught in all buildsleecam2014-12-021-0/+10
* CodeGen: reuse far jumps when possiblemdempsky2014-12-023-16/+61
* Disable SANDBOX_*_TEST on ChromeOSbshe2014-11-281-0/+3
* Linux sandbox: set policy in constructorjln2014-11-276-36/+20
* Linux sandbox: Use ScopedFD in SandboxBPFjln2014-11-266-53/+101
* sandbox: Extend Broker to support improved file permissionsleecam2014-11-2614-188/+892
* Extract CountOpenFds and HasOpenDirectory from credentials.cchidehiko2014-11-269-162/+222
* Linux sandbox: do not detect seccomp on Valgrind.jln2014-11-261-0/+9
* bpf_dsl: remove some PolicyCompiler dependencies on ErrorCodemdempsky2014-11-267-143/+139
* Linux sandbox: cleanup the SandboxBPF classjln2014-11-262-118/+93
* Linux sandbox: change seccomp detection and initialization.jln2014-11-256-324/+123
* Linux sandbox: change API to start the sandboxjln2014-11-256-105/+51
* Restrict clock_getres and prlimit64 on the NaCl helper.rickyz2014-11-223-0/+39
* Linux sandbox: better sys_clone() wrapper.jln2014-11-229-37/+155
* Linux sandbox: start adding syscall wrappersjln2014-11-2015-30/+114
* CodeGen: rewrite implementation [3/3]mdempsky2014-11-208-765/+195
* CodeGen: simplify unit tests [2/3]mdempsky2014-11-181-334/+164
* CodeGen: refactor API [1/3]mdempsky2014-11-175-172/+152
* Linux sandbox: fix Debug Chrome compilation error.posciak2014-11-141-0/+1
* Check within target process for policy match on registry intercepts before se...wfh2014-11-123-0/+125
* Linux sandbox: introduce BrokerChanneljln2014-11-1111-60/+114
* This gets at least a chunk of the Mac GN build working.dpranke2014-11-101-1/+4
* Linux sandbox: change the return type of HandleRequest()jln2014-11-107-35/+133
* Check alternate desktop before applying integrity labeljschuh2014-11-071-1/+1
* CodeGen: refactor unit tests using parameterized testsmdempsky2014-11-031-173/+152
* Linux sandbox: refactor BrokerProcess classjln2014-11-0117-604/+942
* sandbox: extract PrintProgram() into a separate DumpBPF classmdempsky2014-10-317-95/+130
* Standardize usage of virtual/override/final specifiers.dcheng2014-10-296-114/+111
* Do not cache tokens that have app container SIDswfh2014-10-293-25/+46
* Added support of shared_library build for testsripp2014-10-291-4/+21
* Add a few missing overrides found by a new clang warning.thakis2014-10-291-1/+1
* Further restrict access on the alternate winstation and desktopwfh2014-10-281-4/+8
* SyscallSet: add ValidOnlymdempsky2014-10-284-38/+79
* bpf_dsl: rename SandboxBPFDSLPolicy to just Policymdempsky2014-10-2429-149/+201
* Add Link-Time Optimizations support for Android.fdegans2014-10-231-0/+5
* SyscallIterator: support C++11 range-based for loopsmdempsky2014-10-226-58/+139
* Give PEImage a virtual destructorhans2014-10-221-0/+4
* Standardize usage of virtual/override/final in sandbox/dcheng2014-10-224-22/+20
* Syscall: Fix Syscall::Call's X86-64 implementation for CFI unwindingmdempsky2014-10-202-40/+22
* Disable BaselinePolicy.SIGSYS_InvalidSyscall on Chrome OS.Jorge Lucangeli Obes2014-10-201-0/+3
* bpf_dsl: move more implementation details out of bpf_dsl.hmdempsky2014-10-175-48/+33
* bpf_dsl: add TrapRegistry and extract PolicyCompilermdempsky2014-10-1622-849/+937
* cons: rework API to utilize C++11mdempsky2014-10-154-35/+124