[Webkit-unassigned] [Bug 188568] [GTK][WPE] Implement subprocess sandboxing

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=188568

--- Comment #62 from Carlos Garcia Campos <cgarcia at igalia.com> ---
(In reply to Michael Catanzaro from comment #60)
> (In reply to Carlos Garcia Campos from comment #56)
> > Why can't we simply use SharedMemory? I think we could even have a
> > SharedMemory impl based on memfd when available and falling back to shm_open
> > otherwise.
> 
> Because bubblewrap is specifically expecting a memfd. We can implement
> SharedMemory using memfd, but in this case we should avoid using that
> abstraction and rather explicitly write the code that bubblewrap expects.

Really? I think it just expects a file descriptor to read from, being memfd or not shouldn't make any different, or am I missing something?

> > > (In reply to Carlos Garcia Campos from comment #53)
> > Shouldn't they be per web process pool instead of static to the UI process?
> 
> Good idea.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180920/86c3a151/attachment.html>