[Webkit-unassigned] [Bug 188568] [GTK][WPE] Implement subprocess sandboxing

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=188568

--- Comment #63 from Carlos Garcia Campos <cgarcia at igalia.com> ---
(In reply to Carlos Garcia Campos from comment #62)
> (In reply to Michael Catanzaro from comment #60)
> > (In reply to Carlos Garcia Campos from comment #56)
> > > Why can't we simply use SharedMemory? I think we could even have a
> > > SharedMemory impl based on memfd when available and falling back to shm_open
> > > otherwise.
> > 
> > Because bubblewrap is specifically expecting a memfd. We can implement
> > SharedMemory using memfd, but in this case we should avoid using that
> > abstraction and rather explicitly write the code that bubblewrap expects.
> 
> Really? I think it just expects a file descriptor to read from, being memfd
> or not shouldn't make any different, or am I missing something?

https://github.com/projectatomic/bubblewrap/blob/master/utils.c#L513

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180920/91e83083/attachment.html>