1151767 - Change the default Windows content sandbox to low integrity.

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, defect)

Description

[Bob Owen (:bobowen) (PTO until 17th Oct)]

Bug 1149483 made the level 1 content sandbox on Windows a low integrity sandbox.

This bug is to move this policy to the default content sandbox (level 0).

The level 1 settings will be changed back to a slightly stronger policy, which is the next goal.

Comment 1

[Bob Owen (:bobowen) (PTO until 17th Oct)]

Attachment: On Windows, make level 1 the default content sandbox on Nightly.

As the WinXP webgl problem turned out to be a red herring (as far as low integrity is concerned), I think we can land this on Nightly now.

I'll post to dev-platform stating this as I land it and explain how you can go back to level 0 to test if this is causing a particular regression.

Try push to make sure no tests that pass with e10s have regressed:
https://treeherder.mozilla.org/#/jobs?repo=try&revision=0cca47651707

Comment 2

[Bob Owen (:bobowen) (PTO until 17th Oct)]

I thought there were a load of new regressions in that try push, but when I compare it to an e10s only push, all the failures match up:
https://treeherder.mozilla.org/#/jobs?repo=try&revision=3bbb776f1459

Comment 3

[Pulsebot]

https://hg.mozilla.org/integration/mozilla-inbound/rev/72e664840cf4

Comment 4

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/72e664840cf4