16 ms·
It runs in a VM for precisely this reason. Look into the design docs and see how every piece is further locked down using minijail.
by mav3rick 7y ago
It runs in a VM for precisely this reason. Look into the design docs and see how every piece is further locked down using minijail.
- rptr_87 7y agoDocument links: https://www.chromium.org/chromium-os/chromiumos-design-docs/security-overview https://www.chromium.org/chromium-os/chromiumos-design-docs/... https://www.chromium.org/chromium-os/chromiumos-design-docs/system-hardening https://www.chromium.org/chromium-os/chromiumos-design-docs/...