GitLab

Confines the sharing service WebRTC helper in the union of utility
and renderer sandboxes.

Windows:-

Adds win32k lockdown.
Adds dynamic code disable.

Linux:-

Utility style seccomp with some calls removed.

Mac:-

Shortcuts to utility.

Testing:-

Manual test on each platform of large remote clipboard copy
to/from unmodified Canary with all sharing flags enabled.

Bug: 1045590
Change-Id: I72c1270c7db0dcce9e532ac97ad756fd22970574
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2051405Reviewed-by: Scott Violet <sky@chromium.org>
Reviewed-by: Will Harris <wfh@chromium.org>
Reviewed-by: Richard Knoll <knollr@chromium.org>
Reviewed-by: Matthew Denton <mpdenton@chromium.org>
Commit-Queue: Alex Gough <ajgo@chromium.org>
Cr-Commit-Position: refs/heads/master@{#751902}