8 ms·
The effect is overstated & overrepeated, especially with facilities like e.g. ptrace being available to processes on linux
by ris 13y ago
The effect is overstated & overrepeated, especially with facilities like e.g. ptrace being available to processes on linux
- fulafel 13y agoNo, ptrace() is not available to Chrome's sandboxed processes. Not in the SUID sandbox and not in the BPF seccomp sandbox. This stuff is described at http://code.google.com/p/chromium/wiki/LinuxSandboxing http://code.google.com/p/chromium/wiki/LinuxSandboxing - if after reading that you still don't think it provides a significant additional layer of security, it would be interesting to hear what flaws you see.