summaryrefslogtreecommitdiffstats
path: root/sandbox
Commit message (Expand)AuthorAgeFilesLines
* cons: rework API to utilize C++11mdempsky2014-10-154-35/+124
* SyscallIterator: cleanup tests toomdempsky2014-10-141-143/+63
* declare extern template classes soonermostynb2014-10-141-5/+11
* seccomp-bpf: Remove legacy SandboxBPFPolicy classmdempsky2014-10-1416-108/+56
* bpf_dsl: Move {Bool,Result}ExprImpl definition into separate headermdempsky2014-10-145-34/+65
* sandbox_bpf: Remove Traverse method.rickyz2014-10-142-45/+0
* sandbox_bpf: rework how unsafe traps are compiled/verifiedmdempsky2014-10-097-179/+98
* SyscallIterator: refactor internalsmdempsky2014-10-082-73/+62
* replace OVERRIDE and FINAL with override and final in sandbox/mostynb2014-10-0721-127/+127
* Fixes for more MSVC warnings, sandbox/ edition.pkasting2014-10-0433-249/+351
* sandbox_bpf: convert remaining policies to use bpf_dslmdempsky2014-10-045-26/+46
* sandbox: Fix uninitialized data in non-jumping bpf instructionsleecam2014-10-032-23/+22
* Cleanup sandbox/ in advance of re-enabling some MSVC warnings.pkasting2014-10-0210-116/+67
* Rename all isolate_dependency_* to files.maruel2014-10-012-2/+1
* Linux sandbox: Restrict sched_* syscalls on the GPU and ppapi processes.rickyz2014-09-293-10/+14
* Linux sandbox: Allow restricting sched_* on other processes.rickyz2014-09-265-0/+160
* Linux sandbox: fill all parameters when detecting seccomp syscall.Julien Tinnes2014-09-251-12/+9
* Remove implicit HANDLE conversions from sandbox.rvargas2014-09-258-23/+24
* sandbox: Avoid ~(flag1 | flag2 | ...) expressionsmdempsky2014-09-232-15/+14
* sandbox: Convert remaining legacy tests to use policy classesMatthew Dempsky2014-09-2310-186/+169
* Linux sandbox: Remove CodeGen::JoinInstructions.rickyz2014-09-183-65/+25
* [MIPS] Fix seccomp-bpf compile error for MIPSGordana.Cmiljanovic2014-09-171-0/+5
* fix sandbox memory leakcpu2014-09-171-11/+20
* Decouple CodeGen from ErrorCodemdempsky2014-09-174-46/+36
* Large IWYU cleanup for seccomp-bpfmdempsky2014-09-1621-41/+67
* Decouple Trap from ErrorCodemdempsky2014-09-166-103/+105
* Split AssembleFilter into comprehensible chunksmdempsky2014-09-162-149/+205
* Linux sandbox: Disallow get_robust_list and set_robust_list.rickyz2014-09-162-1/+3
* Linux sandbox: restrict clock_gettime() and clock_getres()jln2014-09-133-1/+14
* Convert sandbox_bpf_unittest.cc to use bpf_dslmdempsky2014-09-137-419/+461
* Make "rt" library Linux-only in GN build.Brett Wilson2014-09-121-1/+4
* Add "rt" to libs of GN build linux sandbox unittests.Brett Wilson2014-09-121-0/+2
* Remove --find-inode-switch hack from chrome-sandboxmdempsky2014-09-126-194/+3
* Linux sandbox: fix MIPS Android compilation bug.jln2014-09-121-0/+5
* Cleanup: Use base/files/file_util.h instead of base/file_util.h in [r-t]*/thestig2014-09-127-7/+7
* Linux sandbox: move RestrictClockID() to sandbox/jln2014-09-126-0/+165
* Enable futex tests on Android.jln2014-09-122-5/+12
* Linux sandbox: allow sigaltstack in Android baseline policy.jln2014-09-111-4/+3
* Linux sandbox: restrict {set,get}priority() in baseline policy.Julien Tinnes2014-09-114-1/+54
* Fix sbox_validation_tests for Server 2012R2drbasic2014-09-111-1/+1
* GN: Enable blink and (nearly) all of content in android buildJames Robinson2014-09-101-29/+33
* Reorganize sandbox operator new, add a comment.Nico Weber2014-09-101-8/+14
* bpf_dsl: fix argument-dependent lookup of BoolExpr operatorsmdempsky2014-09-102-5/+8
* Remove NT_PLACE, it's not really used.thakis2014-09-103-3/+10
* Sandbox: Don't CloseHandle after calling DuplicateHandlervargas2014-09-101-4/+0
* sandbox: remove seccomp-bpf demo programmdempsky2014-09-093-574/+0
* Mark gtest and gmock as testonly in GN.Brett Wilson2014-09-081-0/+1
* NonSFI sandbox: restrict futex(2) operations.jln2014-09-081-2/+0
* win: Don't use precision with %wZ, it's ignored.Nico Weber2014-09-081-2/+2
* Added logging in PolicyBase::AddRule.vitalybuka2014-09-072-78/+93