Le lundi 08 décembre 2014 à 13:08 +0000, Pozdnyakov, Mikhail a écrit :
> Hi,
> 
> Description:
> 
> The Dual process model is a process model where each application run contains 
> two processes:
> The first process includes Browser process (BP),  GPU process (GP) and 
> Extension process (EP)

Hi Mikhail, Hi all,

IIRC & IMHO, merging BP and EP is a NO GO from the Tizen Security Point
of View. The rational is that EP to be as usable as possible from the
developper scope (hybrid apps) have to be sandboxed using Smack and
should not have capabilities.

Best regards
José Bollo

> The second process is Renderer process (RP) and it runs in Seccomp sandbox
> 
> Rational:
> 
> At the moment Crosswalk on Tizen is using Shared process model (sharing BP 
> between all the apps) this however creates the following problems:
> 
> (1) the diversity from Crosswalk implementations on other platforms 
> (2) great complexity (BP has to do a lot of extra stuff to handle multiple 
> apps + we've a dbus launcher) and hence 
> (3) more bugs (because of more complexity). 
> 
> All these significantly increase the development and maintenance costs (the 
> recent efforts on enabling of Tizen platform security mechanisms in Crosswalk 
> is a good example of how having the Shared process model caused a lot of 
> troubles)
> 
> Affected components:
> Crosswalk on Tizen, Crosswalk application tools (xwalk launcher, xwalkctl)
> 
> This change will apparently modify also the Tizen Crosswalk command line 
> interface  (for example remote debugging cmd line options) whereas xwalk 
> binary will be invoked directly.
> 
> Target platform: Tizen
> 
> Implementation plan:
> 1) Add the Tizen appcore-related logic and other functionality from 
> xwalk-launcher to BP
> 2) Make the necessary modifications in Tizen so that it does not rely on the 
> Shared process model any more (e.g. launches xwalk instead of xwalk-launcher)
> 3) Merge EP and GP into BP -- make it Dual process model
> 4) Clean up tons of unused code, including removal of xwalk-launcher (yay!)
> 
> BR,
> Mikhail
> ---------------------------------------------------------------------
> Intel Finland Oy
> Registered Address: PL 281, 00181 Helsinki 
> Business Identity Code: 0357606 - 4 
> Domiciled in Helsinki 
> 
> This e-mail and any attachments may contain confidential material for
> the sole use of the intended recipient(s). Any review or distribution
> by others is strictly prohibited. If you are not the intended
> recipient, please contact the sender and delete all copies.
> 
> _______________________________________________
> Dev mailing list
> d...@lists.tizen.org
> https://lists.tizen.org/listinfo/dev


_______________________________________________
Crosswalk-dev mailing list
Crosswalk-dev@lists.crosswalk-project.org
https://lists.crosswalk-project.org/mailman/listinfo/crosswalk-dev

Reply via email to