summaryrefslogtreecommitdiffstats
path: root/sandbox
Commit message (Expand)AuthorAgeFilesLines
...
* This CL adds a method to create process using LowBox token on Windows. LowBox...shrikant2015-03-0210-25/+173
* Revert of Roll Clang 223108:230631 (+revert of r229678) (patchset #5 id:80001...hans2015-03-011-5/+0
* Roll Clang 223108:230631 (+revert of r229678)hans2015-03-011-0/+5
* Apply gn format with 'sources' sorting to src/scottmg2015-02-283-24/+24
* Reland the ULONG -> SIZE_T change from 317177rnk2015-02-262-4/+4
* Linux Sandbox: make sure Credentials test pass on TSANjln2015-02-243-0/+20
* Linux sandbox: better APIs with /proc/ argumentsjln2015-02-2413-119/+134
* Add GN for sandbox_linux_jni_unittestsrockot2015-02-211-19/+22
* Revert of sandbox: Fix Win64 porting issue by using SIZE_T instead of ULONG (...jfb2015-02-202-7/+7
* sandbox: Change directory names in ProcUtil test to support Androidleecam2015-02-201-8/+8
* Revert of bpf_dsl: decouple PolicyCompiler from Syscall (patchset #3 id:40001...kaliamoorthi2015-02-206-40/+46
* Revert of bpf_dsl: switch PolicyCompiler from seccomp-bpf/die.h to base/loggi...mdempsky2015-02-202-33/+44
* Revert of bpf_dsl: Change bpf_dsl_unittests into actual standalone unit tests...kaliamoorthi2015-02-205-161/+79
* bpf_dsl: switch PolicyCompiler from seccomp-bpf/die.h to base/logging.hmdempsky2015-02-202-44/+33
* bpf_dsl: Change bpf_dsl_unittests into actual standalone unit testsmdempsky2015-02-205-79/+161
* bpf_dsl: decouple PolicyCompiler from Syscallmdempsky2015-02-206-46/+40
* Update Chomium's build files to work w/ latest GN binaries.dpranke2015-02-202-5/+5
* sandbox: Fix some nt_internals.h function prototypes for Win64rnk2015-02-202-7/+7
* sandbox: use waitpid consistentlymdempsky2015-02-191-4/+6
* Re-enable handle closer on Windows 10.wfh2015-02-191-7/+0
* Replace handles that the handle closer closes with dummy Events.wfh2015-02-193-3/+158
* Fix GN unit tests on Windows, GN x64 build.brettw2015-02-171-1/+3
* Disable ResourceLimits.NoFork in sandbox_linux_unittests on Android.bauerb2015-02-171-1/+8
* Linux Sandbox: add resource limits to NaCljln2015-02-136-0/+98
* Linux sandbox: split linux_seccomp. in three.jln2015-02-1319-154/+207
* Linux sandbox: fix part of the *SingleThreaded() APIsjln2015-02-1210-41/+57
* Namespace sandbox: add important security checksjln2015-02-121-1/+3
* Linux Sandbox: reorganizejln2015-02-1240-267/+313
* Deny setgroups if needed before writing to gid_map.rickyz2015-02-115-6/+58
* Sandbox Linux: stricter RunPostTestsChecks()jln2015-02-111-4/+17
* Linux sandbox: fix compile under TSAN.jln2015-02-101-3/+3
* Linux sandbox: Provide AssertSingleThreaded() helperjln2015-02-095-59/+164
* Allow using the namespace sandbox in zygote host.rickyz2015-02-072-1/+14
* Do not close handles in target process on Windows 10.wfh2015-02-071-0/+8
* Revert of Roll Clang 223108:228129 (patchset #5 id:80001 of https://coderevie...tapted2015-02-061-5/+0
* Roll Clang 223108:228129hans2015-02-061-0/+5
* Make chrome.exe built with ASan/Win work with sandbox enabledtimurrrr2015-02-055-18/+132
* sandbox: move SyscallSet into bpf_dslmdempsky2015-02-059-22/+20
* sandbox: extract SetuidSandboxHost code from SetuidSandboxClientmdempsky2015-02-059-271/+368
* sandbox: move Codegen into bpf_dsl directorymdempsky2015-02-0512-17/+17
* Move OpenProcessHandle to Process::Open.rvargas2015-02-041-5/+4
* sandbox: run Credentials.CanDetectRoot as a SANDBOX_TESTmdempsky2015-02-041-5/+5
* Minor refactoring of setuid_sandbox_client.hidehiko2015-02-042-13/+3
* Temporarily disable tests using Credentials::DropFileSystemAccess on ASAN.rickyz2015-02-041-1/+2
* Add namespace sandbox class.rickyz2015-02-0310-12/+329
* Initialize create_disposition to FILE_OPEN in sandboxjschuh2015-01-291-1/+1
* Allow getrusage under ASAN.rickyz2015-01-294-0/+42
* Linux sandbox: disable a few tests on ASANjln2015-01-271-2/+3
* Move a couple of utility functions to a new namespace_utils class.rickyz2015-01-279-42/+210
* Added a new process mitigation to harden process token IL policy.forshaw2015-01-264-1/+91