Commit 9628153e authored by Oliver Hunt's avatar Oliver Hunt Committed by Commit Bot

[fuchsia] Add ambient-executable feature flag

Adding ambient-executable feature flag to component sandboxes
as a preflight for restricting the use of replace_as_executable
with an invalid handle.

Bug: SEC-354
Change-Id: If23482218720e8024f054a7dafc3f4366d1db7f9
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1687945
Commit-Queue: Oliver Hunt <ojh@google.com>
Reviewed-by: default avatarSergey Ulanov <sergeyu@chromium.org>
Reviewed-by: default avatarYuchen Liu <yucliu@chromium.org>
Reviewed-by: default avatarFabrice de Gans-Riberi <fdegans@chromium.org>
Cr-Commit-Position: refs/heads/master@{#675848}
parent ea214ea2
...@@ -4,7 +4,8 @@ ...@@ -4,7 +4,8 @@
"isolated-persistent-storage", "isolated-persistent-storage",
"root-ssl-certificates", "root-ssl-certificates",
"system-temp", "system-temp",
"vulkan" "vulkan",
"deprecated-ambient-replace-as-executable"
], ],
"dev": [ "dev": [
"null", "null",
......
...@@ -4,7 +4,8 @@ ...@@ -4,7 +4,8 @@
"isolated-persistent-storage", "isolated-persistent-storage",
"root-ssl-certificates", "root-ssl-certificates",
"system-temp", "system-temp",
"vulkan" "vulkan",
"deprecated-ambient-replace-as-executable"
], ],
"dev": [ "dev": [
"null", "null",
......
...@@ -2,7 +2,8 @@ ...@@ -2,7 +2,8 @@
"sandbox": { "sandbox": {
"features": [ "features": [
"root-ssl-certificates", "root-ssl-certificates",
"vulkan" "vulkan",
"deprecated-ambient-replace-as-executable"
], ],
"services": [ "services": [
"fuchsia.logger.LogSink", "fuchsia.logger.LogSink",
......
...@@ -3,7 +3,8 @@ ...@@ -3,7 +3,8 @@
"features": [ "features": [
"isolated-persistent-storage", "isolated-persistent-storage",
"deprecated-shell", "deprecated-shell",
"system-temp" "system-temp",
"deprecated-ambient-replace-as-executable"
], ],
"services": [ "services": [
"fuchsia.device.NameProvider", "fuchsia.device.NameProvider",
......
{ {
"sandbox": { "sandbox": {
"features": [ "features": [
"root-ssl-certificates" "root-ssl-certificates",
"deprecated-ambient-replace-as-executable"
], ],
"services": [ "services": [
"fuchsia.device.NameProvider", "fuchsia.device.NameProvider",
......
{ {
"sandbox": { "sandbox": {
"features": [], "features": [
"deprecated-ambient-replace-as-executable"
],
"services": [ "services": [
"chromium.cast.ApplicationConfigManager", "chromium.cast.ApplicationConfigManager",
"fuchsia.device.NameProvider", "fuchsia.device.NameProvider",
......
{ {
"sandbox": { "sandbox": {
"features": [ "features": [
"isolated-persistent-storage" "isolated-persistent-storage",
"deprecated-ambient-replace-as-executable"
], ],
"services": [ "services": [
"fuchsia.device.NameProvider", "fuchsia.device.NameProvider",
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment