On Thursday, July 30, 2009, n179911 <n179...@gmail.com> wrote:
> I am trying to see what it the current setting in chromium. I can't
> find that in http://renderer.sb or when sandbox_init() is called.
As TVL said in his earlier reply, renderer.sb *is* the current
setting. We use a custom set of allow/deny rules rather than one of
the pre-canned defaults.
> And then I would want to see if I can switch it to
> 'kSBXProfilePureComputation'
> and see what may break.
Reading renderer.sb should give you exactly that information; all of
the exclusions there were added for a reason (documented in the file).
The design doc you are reading sounds like it hasn't been updated
since the sandbox was actually implemented; it should probably be
updated.
-Stuart
--~--~---------~--~----~------------~-------~--~----~
Chromium Developers mailing list: chromium-dev@googlegroups.com
View archives, change email options, or unsubscribe:
http://groups.google.com/group/chromium-dev
-~----------~----~----~----~------~----~------~--~---
