cca5a6dd37
Add --enable-sandbox to Ladybird and test-web, pass it through to ImageDecoder, and make ImageDecoder install its Linux sandbox only when the option is present. The Linux implementation enables no_new_privs, configures glibc malloc to avoid late CPU-count probes in helper threads, applies an empty Landlock ruleset when available, and installs a seccomp filter for the helper IPC, shared memory, threading, and decoding syscalls. Deny plain read-only filesystem probes without granting file access, so common runtime feature checks can observe the sandbox instead of terminating the helper during normal decoding.
15 lines
219 B
C++
15 lines
219 B
C++
/*
|
|
* Copyright (c) 2026-present, the Ladybird developers.
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <AK/Error.h>
|
|
|
|
namespace ImageDecoder {
|
|
|
|
[[nodiscard]] ErrorOr<void> apply_sandbox();
|
|
|
|
}
|