Status of sandbox/Capsicum support in the Chromium FreeBSD port

Khilan Gudka Khilan.Gudka at cl.cam.ac.uk
Thu Jan 30 11:33:24 UTC 2014


Hi Rene

On 30 January 2014 11:27, René Ladan <rene at freebsd.org> wrote:

> 2014-01-30 Khilan Gudka <Khilan.Gudka at cl.cam.ac.uk>:
> > Dear Chromium port maintainer(s)
> >
> > I was wondering what the current status was with regards to sandboxing
> > renderer processes. In particular, now that Capsicum comes as standard in
> > FreeBSD, I'm interested in running Chromium with Capsicum enabled. Robert
> > Watson (my supervisor, and whose office is opposite mine) did an initial
> > version a few years ago (https://github.com/rwatson/chromium-capsicum)
> but
> > these patches were not upstreamed.
> >
> For what its worth, George Liaskos (on chromium@) and I started
> submitting our
> patches upstream, but it will take a while I guess given the number of
> patches.


Is there any sandboxing being done at all currently in the FreeBSD port?

Cheers

--
Khilan Gudka
Research Associate
Security Group
Computer Laboratory
University of Cambridge
http://www.cl.cam.ac.uk/~kg365/


More information about the freebsd-chromium mailing list