[Webkit-unassigned] [Bug 188568] [GTK][WPE] Implement subprocess sandboxing

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=188568

--- Comment #60 from Michael Catanzaro <mcatanzaro at igalia.com> ---
(In reply to Carlos Garcia Campos from comment #56)
> Why can't we simply use SharedMemory? I think we could even have a
> SharedMemory impl based on memfd when available and falling back to shm_open
> otherwise.

Because bubblewrap is specifically expecting a memfd. We can implement SharedMemory using memfd, but in this case we should avoid using that abstraction and rather explicitly write the code that bubblewrap expects.

> > (In reply to Carlos Garcia Campos from comment #53)
> Shouldn't they be per web process pool instead of static to the UI process?

Good idea.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180919/9cfd4e2e/attachment-0001.html>