- 0412f277 Use RemoveAllPrivileges instead of removing SE_CHANGE_NOTIFY_NAME by Stefan Smolen · 9 months ago
- f37ea2d Roll Android NDK r25c -> r26b (take 2) by Andrew Grieve · 9 months ago
- 9700691e Remove base::bits::IsPowerOfTwo in sandbox/ by Avi Drissman · 10 months ago
- 96aa722 Use googletest flag macros to access googletest flags in //sandbox/linux. by Daniel Cheng · 10 months ago
- 0de9551f Replace various uses of Log2Floor and Log2Ceiling with std calls. by Avi Drissman · 10 months ago
- 1df1250 Replace base::StringPiece in //sandbox with std::string_view by Julie Jeongeun Kim · 10 months ago
- 9c9d3da on_device_model: Sandbox config for Linux/CrOS by Ken Rockot · 10 months ago
- b9855b1 Disable OOP printing for Fuchsia by Alan Screen · 10 months ago
- 66fac67e Fix larger models not loading on Windows. by John Abd-El-Malek · 10 months ago
- 32484a2 mac: Remove some sandbox debug cruft accidentally left in gpu.sb by Robert Sesek · 10 months ago
- c9cdf28 Remove AllowNamedPipes rule from sandbox by Alex Gough · 10 months ago
- ccd44fd [sandbox/linux] Add a feature to increase renderer sandbox memory limit by Benoit Lize · 10 months ago
- 59ac822 Rename {absl => std}::optional in minor top-level dirs by Arthur Sonzogni · 10 months ago
- 624ae327 OnDeviceModelService: macOS sandbox policy by Ken Rockot · 10 months ago
- 5f7e141 Enable WinSboxWarmupProcessPrng by default by Alex Gough · 10 months ago
- 69278837 Replace base::WStringPiece usage with std::wstring_view by Lei Zhang · 10 months ago
- 0971c36 Enable MITIGATION_FSCTL_DISABLED on Windows by Alex Gough · 10 months ago
- c5f765d5 Remove remaining base/strings/string_piece_forward.h usage by Lei Zhang · 10 months ago
- 545e4b74 Refactor Windows sandbox policy tests by Alex Gough · 10 months ago
- 3acfb77 Remove unused POLPARAM by Alex Gough · 10 months ago
- e185ab2fa Rename chromecast_build.gni to cast.gni. by mark a. foltz · 11 months ago
- 44db8dc0 Refactor SetupAppContainerProfile by Alex Gough · 11 months ago
- 8dfb81a Remove unused policy opcode definitions by Alex Gough · 11 months ago
- 298b477 Use distinct methods for policy rules in sandbox by Alex Gough · 11 months ago
- 29dd97c Remove unused arguments in ProcessMitigationsWin32KLockdownPolicy by Alex Gough · 11 months ago
- 8a7407b Delete unsupported subsystem kProcess by Alex Gough · 11 months ago
- b8f4283 Sandbox the On-Device Model Service by Ken Rockot · 11 months ago
- 517bec5 Remove NaCl broker process by Fabian Sommer · 11 months ago
- 1c5e590 Moving switch case for some allowed Android syscalls to their own method by Liza Burakova · 11 months ago
- 4ff09df Fix sandbox_linux_unittests with UBSan by David Benjamin · 11 months ago
- 4256948 Moving mremap(), sysinfo(), and clock_getres() behind a feature flag. by Liza Burakova · 11 months ago
- 55bb25a Linux/Cros: Add feature to disable Spectre v2 mitigations in net service by Matthew Denton · 11 months ago
- 212e32f WebUI Mojo Bindings: Explicitly set use_typescript_sources=false by Rebekah Potter · 11 months ago
- 12e10e4 Fix various problems with printf format specifier usage. by Peter Kasting · 11 months ago
- 37e69b2 Remove __NR_socket from override_and_allow flag by Liza Burakova · 11 months ago
- 7c0d98a Fix and warn on use of "%#0" format specifiers. by Peter Kasting · 12 months ago
- 198b80a Allow Android to use RendererProcessPolicy. by Liza Burakova · 12 months ago
- 32da4aa0 Make Mac sandbox initialization errors available to crash dumps by Mark Rowe · 12 months ago
- 8b859c2c Consume Windows FSCTL mitigation in sandboxed processes by Stefan Smolen · 12 months ago
- 061dd78 Remove usage of wstring StringPrintf(): sandbox/ by Peter Kasting · 12 months ago
- d83ed1b Ban raw_ptr<T>::operator[] under enable_pointer_arithmetic_trait_check. by Tom Sepez · 12 months ago
- 2ae85982 [fuchsia] remove remaining dependencies on scenic libraries and fidls by Caroline Liu · 12 months ago
- 2abdd24 Allow PR_PAC_GET_ENABLED_KEYS through the sandbox by Richard Townsend · 1 year ago
- 0c27605 Reland "TTS: Modify TTS service to work with XNNPack (part 2)" by Akihiro Ota · 1 year ago
- e8b0a06f Fix crashes caused by PremierOpinion and RelevantKnowledge software by Sangbaek Park · 1 year ago
- 7939841 Revert "TTS: Modify TTS service to work with XNNPack (part 2)" by Akihiro Ota · 1 year ago
- cf2b1d8a3 Apply RAW_PTR_EXCLUSION to syscall_broker::BrokerSimpleMessage pointers. by Tom Sepez · 1 year, 1 month ago
- 39f47a3 Zero pShimData in PEB for child processes on Windows by Alex Gough · 1 year, 1 month ago
- 193134b9 TTS: Modify TTS service to work with XNNPack (part 2) by Akihiro Ota · 1 year, 1 month ago
- b5e21bd Ignore RendererCodeIntegrityEnabled policy and always enable integrity by Will Harris · 1 year, 1 month ago
- e47e904 sandbox: Remove AdjustLowMemoryMargin declaration by Vovo Yang · 1 year, 1 month ago
- 153da53 Use GetNetworkConnectivityHint for network change notifier by Will Harris · 1 year, 1 month ago
- 64101d1 [Linux network service sandbox] Fix IPV6_RECVERR typo by Matthew Denton · 1 year, 1 month ago
- 11ec5c9 Separate network sandbox support from general app container support. by Will Harris · 1 year, 1 month ago
- 214c5df Enable WinSboxHighRendererJobMemoryLimits by default on trunk. by Will Harris · 1 year, 1 month ago
- 280c58a Move OSStatus logging to base/apple by Avi Drissman · 1 year, 1 month ago
- 5c2b6b2 Adjust audio service sandbox for ScreenCaptureKit by Anže Lešnik · 1 year, 1 month ago
- 4672151 [sandbox] Use base::Contains() instead of std::find() in //sandbox by Ho Cheung · 1 year, 1 month ago
- a644de6 Remove WinSboxAllowSystemFonts escape valve by Alex Gough · 1 year, 1 month ago
- c75aabe Remove ARC boilerplate in /sandbox by Avi Drissman · 1 year, 2 months ago
- e812846 Ban [w]ctype.h: sandbox/ by Peter Kasting · 1 year, 2 months ago
- 6aaa7ce [Windows] Return correct error code when intercepting CreateThread. by James Forshaw · 1 year, 2 months ago
- a113d860 [Windows] Remove sandbox policy dependency on Job class. by James Forshaw · 1 year, 2 months ago
- b9e716bd [Windows] Simplify Chrome ELF's use of sandbox library. by James Forshaw · 1 year, 2 months ago
- 57ca4ce Reland "Make network service sandbox be AppContainer not LPAC, for now." by Will Harris · 1 year, 2 months ago
- e2e265c5 Linux network service sandbox: Restrict socketcall() on x86 by Matthew Denton · 1 year, 2 months ago
- a8b21d7 [Windows] Add service_resolver target to sandbox. by James Forshaw · 1 year, 2 months ago
- f89b4c7 Remove redundant ARC configuration in /sandbox by Avi Drissman · 1 year, 2 months ago
- 3daf5c91 [Windows] Move CanLowIntegrityAccessDesktop to GPU Process Host. by James Forshaw · 1 year, 2 months ago
- 6f0d7885 Revert "Make network service sandbox be AppContainer not LPAC, for now." by Dirk Pranke · 1 year, 2 months ago
- 9e34335 Make network service sandbox be AppContainer not LPAC, for now. by Will Harris · 1 year, 2 months ago
- 01133cd [Windows] Remove use of ResolveNtFunctionPtr in sandbox policy. by James Forshaw · 1 year, 2 months ago
- 7fa8963e Fix duplicate test name in sbox_integration_tests by Bruce Dawson · 1 year, 2 months ago
- ac2364ee media/gpu: Wire MT21Decompressor into Chrome behind flag guard by Justin Green · 1 year, 2 months ago
- 4e86105 Revert "[Fuchsia] Rewrite OpenDirectory to take rights" by Wez · 1 year, 2 months ago
- 865d249a Allow sandbox to warmup only bcryptprimitives.dll by Alex Gough · 1 year, 2 months ago
- d28e61a Reland "Call ProcessPrng not RtlGenRandom/SystemFunction036" by Alex Gough · 1 year, 2 months ago
- 7c96b19b7 Remove 10.13, 10.14 support from sandbox/ by Avi Drissman · 1 year, 2 months ago
- 1e16f32 Make IntegrationTestsTest.JobMemoryLimitCounted less flaky by Stefan Smolen · 1 year, 2 months ago
- 3fcc2f9 Remove 10.13, 10.14 support from sandbox by Avi Drissman · 1 year, 2 months ago
- 294abf2 [Fuchsia] Rewrite OpenDirectory to take rights by Tamir Duberstein · 1 year, 3 months ago
- d219a34 Remove unused functions from NtExports by Alex Gough · 1 year, 3 months ago
- e4a1037 Revert "Linux sandbox: allow alarm() if using in-proc stack dumping" by Anna Tsvirchkova · 1 year, 3 months ago
- eb0253311 Linux sandbox: allow alarm() if using in-proc stack dumping by Matthew Denton · 1 year, 3 months ago
- 30591bb Add readme.md for sandbox/win by Alex Gough · 1 year, 3 months ago
- 1ca3a4f4 Enhance and simplify seccomp error logging by Robert Sesek · 1 year, 3 months ago
- 82e7077 Posix StackDumpSignalHandler should re-raise signal by Matthew Denton · 1 year, 3 months ago
- e5ada49 Use correct helper bundle ID within GPU sandbox profile by Mark Rowe · 1 year, 3 months ago
- 2c91e14 Revert "Call ProcessPrng not RtlGenRandom/SystemFunction036" by Alex Gough · 1 year, 3 months ago
- c53f0e2 Call ProcessPrng not RtlGenRandom/SystemFunction036 by Alex Gough · 1 year, 3 months ago
- d1409c5 Re-Enable BaselinePolicy.SystemEperm on non-x86 Android bots. by Liza Burakova · 1 year, 3 months ago
- 89e1f63c DanglingPtr: mark dangling pointers triggered by unittests by Paul Semel · 1 year, 3 months ago
- 76f652f Refactor cryptbase warmup for sandboxed processes by Alex Gough · 1 year, 3 months ago
- 99d05da Allow sandbox extensions to Metal's cache directories by Mark Rowe · 1 year, 3 months ago
- 3a66a88b Permit mmap() with MAP_32BIT on Android x86_64 by Robert Sesek · 1 year, 3 months ago
- 9b6b34a Close KsecDD handle in renderers by Alex Gough · 1 year, 3 months ago
- cd62e15 Linux network sandbox: disallow netlink socket creation by Matthew Denton · 1 year, 4 months ago
- 6557aece Add getcpu sandbox permission to Screen AI service. by Ramin Halavati · 1 year, 4 months ago
- c37a847b Manual raw_ptr rewrite: Modify the code comment in //sandbox by Ho Cheung · 1 year, 4 months ago
- 71f4a4b Move FileUtilService to kService on Windows by Alex Gough · 1 year, 4 months ago