Bug 1358647 - Disallow bind/listen/accept for Linux content processes. r?gcp draft
authorJed Davis <jld@mozilla.com>
Tue, 25 Apr 2017 19:29:32 -0600
changeset 568383 d153b3c4473bad377935fb2b027ba0c1b317c592
parent 568252 3f0c8da53c5cb015933b10b52ded3f30432b378a
child 625909 6b416dfdd45c46968859386b18facaf535a799dd
push id55852
push userbmo:jld@mozilla.com
push dateWed, 26 Apr 2017 03:45:13 +0000
reviewersgcp
bugs1358647
milestone55.0a1
Bug 1358647 - Disallow bind/listen/accept for Linux content processes. r?gcp MozReview-Commit-ID: Cz9MKxOJnsS
security/sandbox/linux/SandboxFilter.cpp
--- a/security/sandbox/linux/SandboxFilter.cpp
+++ b/security/sandbox/linux/SandboxFilter.cpp
@@ -533,20 +533,16 @@ public:
 #ifdef ANDROID
     case SYS_SOCKET:
       return Some(Error(EACCES));
 #else // #ifdef DESKTOP
     case SYS_RECV:
     case SYS_SEND:
     case SYS_SOCKET: // DANGEROUS
     case SYS_CONNECT: // DANGEROUS
-    case SYS_ACCEPT:
-    case SYS_ACCEPT4:
-    case SYS_BIND:
-    case SYS_LISTEN:
     case SYS_GETSOCKOPT:
     case SYS_SETSOCKOPT:
     case SYS_GETSOCKNAME:
     case SYS_GETPEERNAME:
     case SYS_SHUTDOWN:
       return Some(Allow());
 #endif
     default: