This design doc provides a full implementation design and deployment strategy to sandbox the warmup phase. BackgroundĬhromium historically ran an unsandboxed warm up routine to acquire system resources, before entering the sandbox. To improve security on macOS by sandboxing the currently unsandboxed warmup phase of Chromium child processes, and to remove legacy artifacts in the sandbox profiles by rewriting them to use the most modern profile features. Status: Final, Authors: Last Updated: Objective
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |