- edebee9 Reduce BrokerServicesBase thread stack size by Bruce Dawson · 3 years, 10 months ago
- 110b1bb Linux sandbox: Add BrokerType and ForkSignalBasedBroker() by Matthew Denton · 3 years, 10 months ago
- bb65b10 Linux sandbox: add interface for the brokered syscalls by Matthew Denton · 3 years, 10 months ago
- 55e1bdb Linux sandbox: make policy use ShouldBrokerHandleSyscall() by Matthew Denton · 3 years, 11 months ago
- 3c22878 Linux sandbox: add integration tests for syscall broker by Matthew Denton · 3 years, 11 months ago
- 91b7851 Unblock fcntl flags which are used by the NVIDIA driver by Peng Huang · 3 years, 11 months ago
- 1cdb08f mac: Permit Mach lookup of com.apple.system.opendirectoryd.membership in gpu_v2 by Robert Sesek · 3 years, 11 months ago
- c626185 workaround: disable CFG longjmp protection for Windows on Arm by Richard Townsend · 3 years, 11 months ago
- e7390ab0 mac: Allow two sysctl-reads to common.sb by Robert Sesek · 3 years, 11 months ago
- edfd32d mac: Disable CoreServices _CSCheckFix. by Robert Sesek · 3 years, 11 months ago
- fbcf93c6 Linux syscall broker: fix bionic incompat by Matthew Denton · 3 years, 11 months ago
- 3702d38 Whitelist getdents() for the speech recognition Linux sandbox by evliu · 4 years ago
- 055248e4 Linux sandbox: make BrokerClient::Readlink consistent with kernel by Matthew Denton · 4 years ago
- acb45d6 Refactor OS_LINUX preprocessor directive for LaCrOS effort. by Sean McAllister · 4 years ago
- 9f578fe Prevent race in sandbox IPC initialization by Alex Gough · 4 years ago
- 0005e88e Refactor OS_LINUX preprocessor directive for LaCrOS effort. by Sean McAllister · 4 years ago
- 16c358c [linux][sandbox] Allow memfd_create() syscall in GPU process by Sergey Ulanov · 4 years ago
- 07fe7c47 mac: Allow com.apple.CARenderServer in gpu_v2.sb by Robert Sesek · 4 years ago
- 6430abcf Add necessary macOS sandbox exceptions for H.264 SW and VP9 decoding. by Dale Curtis · 4 years ago
- a046784 chrome/android: Add experiment to run all execution on little cores by Eric Seckler · 4 years ago
- 955648b Permit reading /System/Library/CoreServices/SystemVersionCompat.plist in the sandbox. by Robert Sesek · 4 years ago
- 8a9ff94 Migrate //sandbox and //services typemaps to GN by Ken Rockot · 4 years ago
- e2c08269 Refactor building of startup information. by Alex Gough · 4 years ago
- f9368f7 Update Speech Recognition Windows Sandbox by Evan Liu · 4 years ago
- 14d897af Move SODA path retrieval to the browser process by evliu · 4 years ago
- 88fbd90 Rewrite is_linux flag for sandbox, servicse, ski and testing directories. by Sean McAllister · 4 years ago
- 49828f6 Further cleanup of OS_MACOSX in sandbox by Avi Drissman · 4 years ago
- fdadd6a Migrate to OS_MAC and OS_APPLE in sandbox by Avi Drissman · 4 years ago
- 3a143f5 fix: get CFI tests passing for Windows on Arm by Richard Townsend · 4 years ago
- 230675d Linux sandbox: Allow rseq(2) by Matthew Denton · 4 years ago
- 05971bd Linux sandbox: update arm syscall numbers by Matthew Denton · 4 years ago
- 6e36ad2 Use extended process attributes to associate job at startup. by Alex Gough · 4 years ago
- b09d1f9 Reland "Reland "Add test that verifies CFG loader config is generated correctly."" by Will Harris · 4 years ago
- 83ab4c5 Fix some base::DeleteFileW() calls. by Lei Zhang · 4 years ago
- 8063923 mac: Permit more resource access in the gpu_v2 sandbox profile. by Robert Sesek · 4 years ago
- aac1fd9 Revert "Reland "Add test that verifies CFG loader config is generated correctly."" by Hayato Ito · 4 years ago
- e02b572 [AudioService] Remove audio-sandbox command-line switch by Guido Urdaneta · 4 years ago
- f56c8f8 Reland "Add test that verifies CFG loader config is generated correctly." by Will Harris · 4 years ago
- d611d075 Reduce active process limit to zero in jobs by Alex Gough · 4 years ago
- e28197b1 Revert "Add test that verifies CFG loader config is generated correctly." by Katie Dektar · 4 years ago
- c2b6797 Add test that verifies CFG loader config is generated correctly. by Will Harris · 4 years ago
- c218db23 Allow CFG guards to be generated with gn config. by Will Harris · 4 years ago
- 9720dce Reland "[base] Prepare //net for base::string16 switch" by Jan Wilken Dörrie · 4 years ago
- d4fbc9b Revert "[base] Prepare //net for base::string16 switch" by Fergal Daly · 4 years ago
- ee99ff7 [base] Prepare //net for base::string16 switch by Jan Wilken Dörrie · 4 years ago
- ecc0e14 [fuchsia] Deny executable VMO capability in browser process. by Kevin Marshall · 4 years ago
- 034e4d2 Remove legacy/disabled CFI sbox unittests. by Will Harris · 4 years ago
- 3427567 Fix some gn check issues in //sandbox by Robert Sesek · 4 years ago
- 0310c11 Replace uses of 'whitelist' and 'blacklist' in sandbox. by Will Harris · 4 years, 1 month ago
- cafd683 Remove disable-win32-lockdown flag. by Alex Gough · 4 years, 1 month ago
- 37fb791 mac: Add hw.memsize to allowed sysctls in gpu_v2. by Nico Weber · 4 years, 1 month ago
- 7d0b49b Move //services/service_manager/sandbox to //sandbox/policy. by Robert Sesek · 4 years, 1 month ago
- 5fd7906 Prevent overflow in sandbox/win reference counts. by Alex Gough · 4 years, 1 month ago
- a42752a mac: Convert GN libs lists to frameworks in //sandbox. by Robert Sesek · 4 years, 1 month ago
- d721ea2 Clarify ownership for TargetProcess in sandbox. by Alex Gough · 4 years, 1 month ago
- 8430f50 mac: use our own ARCH_CPU macros in here. by Nico Weber · 4 years, 1 month ago
- 88e2ed5 mac: Make sandbox/ build on arm64. by Nico Weber · 4 years, 1 month ago
- f889c1e Fix typos for "outer". by Lei Zhang · 4 years, 1 month ago
- 7755deb8 Remove/replace unnecessary includes of logging.h (sandbox/) by Hans Wennborg · 4 years, 1 month ago
- 77e0de8 sandbox_linux_unittests: add sigaltstack to IsSyscallForTestHarness by Hans Wennborg · 4 years, 1 month ago
- 7aba794 Include-what-you-use related to logging.h (sandbox) by Hans Wennborg · 4 years, 1 month ago
- df0fc8a Convert NULL to nullptr or shorten to bool-like expression by Bartek Nowierski · 4 years, 2 months ago
- e1b090d Remove policy size metric and associated plumbing. by Alex Gough · 4 years, 2 months ago
- 8621cf2a Reduce space reserved for sandbox policy. by Alex Gough · 4 years, 2 months ago
- 3253b67 Replace NULL and 0 with nullptr by Bartek Nowierski · 4 years, 2 months ago
- f067925c Adds tracing for sandbox configuration on Windows by Alex Gough · 4 years, 2 months ago
- a399aae1 Include string.h in sandbox/linux/tests/scoped_temporary_file.cc. by Piotr Tworek · 4 years, 2 months ago
- 3562cfd5 Seccomp Opt-out SSBD by Kong, Fanchen · 4 years, 2 months ago
- 84c0b5f Update seatbelt_sandbox_design.md by Robert Sesek · 4 years, 3 months ago
- 75fdd71 sheriff: Disable tests that fail on Win10 Tests x64 (dbg) by Fergus Dall · 4 years, 3 months ago
- 1b886f0 Remove/replace unnecessary logging.h includes in .cc files (sandbox) by Hans Wennborg · 4 years, 3 months ago
- c80e0bd7 Add a bunch of missing string.h / cstring includes in //sandbox/linux. by Piotr Tworek · 4 years, 3 months ago
- 2511877 logging.h related include-what-you-use (sandbox/) by Hans Wennborg · 4 years, 3 months ago
- 4f1ba9f Log PolicyGlobalSizeOnSuccess histogram. by Alex Gough · 4 years, 4 months ago
- d94c7c50 [base] Apply BindOnceRewriter in //sandbox by Jan Wilken Dörrie · 4 years, 4 months ago
- 37c9d9c Add ajgo to Windows sandbox OWNERS. by Chris Palmer · 4 years, 4 months ago
- e44258c Enable -Wunreachable-code for win/asan. by Nico Weber · 4 years, 4 months ago
- 0442890 Suppress a few -Wunreachable-code warnings on iOS and Android. by Nico Weber · 4 years, 4 months ago
- d9d917c0 Enable Wunreachable-code for chromium_code on Linux. by Nico Weber · 4 years, 4 months ago
- 77db3e5 Suppress a few more -Wunreachable-code warnings. by Nico Weber · 4 years, 5 months ago
- ef342bf Add mpdenton to sandbox/linux/OWNERS. by Chris Palmer · 4 years, 5 months ago
- bd02bc29e Reland "Make the coverage config reusable for generic profiling." by Sebastien Marchand · 4 years, 5 months ago
- 2128530 Revert "Make the coverage config reusable for generic profiling." by Jeevan Shikaram · 4 years, 5 months ago
- c7695f6 Make the coverage config reusable for generic profiling. by Sebastien Marchand · 4 years, 5 months ago
- 819df6c Adds metrics for policy global size. by Alex Gough · 4 years, 5 months ago
- 01c8afd Use OSInfo::Kernel32Version() to select a thunk resolver by Toshihito Kikuchi · 4 years, 5 months ago
- c1ce57e [Windows] Add support for random restricted SID. by James Forshaw · 4 years, 5 months ago
- 6f1949a3 Allow limited prlimit64 calls in a utility sandbox by Ken Rockot · 4 years, 5 months ago
- c3bbec9 Enable memcmp checking in tsan and msan builds. by Nico Weber · 4 years, 5 months ago
- 4d1d552 Check for job tracker in list before processing. by Alex Gough · 4 years, 6 months ago
- 0676e1c Noted important log messages by Ian Barkley-Yeung · 4 years, 6 months ago
- 6e8e595b android: add test filter file for sandbox_linux_unittests on emulators. by John Budorick · 4 years, 6 months ago
- 6bd491d Avoid using glibc internals for SIGSYS handler by Michael Forney · 4 years, 6 months ago
- 849d1792 Reformat all gn files in /sandbox/win. by Nico Weber · 4 years, 7 months ago
- 69a65a3a [base] Return mutable spans from mutable Value::GetList() by Jan Wilken Dörrie · 4 years, 7 months ago
- 9ccb418 Revert "Derive name of the Linux SUID sandbox executable from the main one." by Michael Spang · 4 years, 7 months ago
- 36d4abc Reformat all gn files in /sandbox/mac. by Nico Weber · 4 years, 7 months ago
- e658ef6 Reformat all gn files in /sandbox/linux. by Nico Weber · 4 years, 7 months ago
- 99146dc9 Reformat all gn files in /sandbox. by Nico Weber · 4 years, 7 months ago
- 07dd9f6 Derive name of the Linux SUID sandbox executable from the main one. by Francois Marier · 4 years, 7 months ago