Revision as of 16:41, 1 October 2013

The fox is safe in the sandbox. The fox cannot escape.

Documentation

We have a plan. Take the e10s code, slap the Chromium sandbox around the content process, and get AdBlockPlus working with it.

Tracking:

Electrolysis
Embedding/IPCLiteAPI, https://github.com/tmeshkova/mozilla-central
Native Client on Wikipedia - has links to papers on Native Client's design and use of SFI, as well as papers on SFI itself
AMO/Squeaky, or Make Addons Awesome

Some folks from the SecurityEngineering team: bsmith, imelven, mmc, keeler, sid.

@@ Line 17: / Line 17: @@
 * {{bug|790923}} - [[B2G/Architecture/System_Security/Seccomp|seccomp sandboxing]] (B2G Linux)
 * {{bug|tbd}} - [http://www.chromium.org/developers/design-documents/sandbox chromium sandbox] (Windows)
-* {{bug|387248}} - Mac OS X
+* {{bug|387248}} - Mac OS X ([http://reverse.put.as/wp-content/uploads/2011/09/Apple-Sandbox-Guide-v1.0.pdf Apple's Sandbox guide])
 * {{bug|730956}} - [[Features/Security/Low_rights_Firefox|Low rights Firefox]] (whole app sandbox)