Security/Sandbox/2015-08-20

« previous week | index | next week »

Windows

• Content Sandboxing
  • bug 1156742 - print to xps with low integrity sandbox - I have this pretty much working, but still needs some work. I will get a WIP patch up tomorrow and hopefully I can get some feedback while on PTO.

• NPAPI Sandboxing
  • bug 1185529 - Flash AS2 Key.isDown recently broken - uplifted to Beta.
  • bug 1182411 - Flash settings menu doesn't work on windowless plugins with low integrity sandbox - uplifted to Aurora and Beta.
  • bug 1185532 - Turn on the NPAPI process sandbox for Windows 64-bit by default - landed.

Linux/B2G

• Content Sandboxing
  • bug 930258 is making progress again.
    • (I wonder how much of this I'll need to rewrite to make it useful for desktop....)

• Other Linux Work
  • pid namespace unshare working-as-WIP again (but re-broke multithreaded debugging); summarized in bug 1151624 comment #1 and 2.

Cross Platform

• WebRTC/OpenH264 Sandboxing
  • Patches are "done", discussing 1 remaining lifetime issues with mrbkap.
  • Perf is excellent, 1ms IPC latency.

Round Table

• Filesystem read access / bug 1196384
• Do we need a sandboxing umbrella module yet?