ladybird/Services
Andreas Kling 784ca98041 LibSandbox: Allow listing read-write directories
Include directory read access in Landlock read-write directory rules.
Without it, paths such as /dev/dri could be writable but not enumerable
after sandboxing, which made Mesa fail while probing GPU devices.

Allow the Compositor to open /dev/udmabuf as well when the device is
present, matching the other GPU device nodes exposed to the process.
2026-06-19 19:12:26 +02:00
..
Compositor LibSandbox: Allow listing read-write directories 2026-06-19 19:12:26 +02:00
ImageDecoder LibWebView: Make helper sandboxing opt-out 2026-06-16 19:02:54 +02:00
RequestServer LibWebView: Make helper sandboxing opt-out 2026-06-16 19:02:54 +02:00
WebContent LibDevTools+LibWeb: Let DevTools remove IndexedDB data 2026-06-19 14:25:39 +02:00
WebDriver LibWebView: Make helper sandboxing opt-out 2026-06-16 19:02:54 +02:00
WebWorker LibWeb+WebContent+WebWorker: Drop display list player type selection 2026-06-18 10:25:44 +02:00
CMakeLists.txt Compositor+LibWebView+WebContent: Scaffold opt-in Compositor process 2026-05-22 19:50:42 +01:00
RendererSandbox.h WebContent: Sandbox renderer processes on Linux 2026-06-09 19:35:09 +02:00
RendererSandboxLinux.cpp Services: Deny GPU operations in WebContent 2026-06-18 10:25:44 +02:00
RendererSandboxMacOS.cpp LibSandbox: Add macOS service sandboxing 2026-06-10 21:16:41 +02:00
RendererSandboxUnimplemented.cpp WebContent: Sandbox renderer processes on Linux 2026-06-09 19:35:09 +02:00