| commit | b94f6817d3a0e20ec5c3393a4eb13dd360acbd4e | |
| author | jln <jln@chromium.org> | |
| Thu, 12 Feb 2015 04:53:04 +0000 (11 20:53 -0800) | ||
| committer | Commit bot <commit-bot@chromium.org> | |
| Thu, 12 Feb 2015 04:53:27 +0000 (12 04:53 +0000) | ||
| tree | bc6d7dc47b28e2fe0aa0092d284ed16888704c24 | treesnapshot (tar.gz zip) |
| parent | cffa4164960b8bff230276d51c1e82bac87c248c | commitdiff |
Namespace sandbox: add important security checks
When engaging the namespace sandbox, add important checks that the process
is single threaded and has no directory file descriptor open.
As part of this change, move the function engaging the namespace
sandbox from the Zygote to the LinuxSandbox class.
BUG=457377, 312380
Review URL: https://codereview.chromium.org/915823002
Cr-Commit-Position: refs/heads/master@{#315932}
When engaging the namespace sandbox, add important checks that the process
is single threaded and has no directory file descriptor open.
As part of this change, move the function engaging the namespace
sandbox from the Zygote to the LinuxSandbox class.
BUG=457377, 312380
Review URL: https://codereview.chromium.org/915823002
Cr-Commit-Position: refs/heads/master@{#315932}