Sandboxing on Google Chrome for Mac OS X

Google Chrome for Mac is coming along fine, Jeremy Moskovich explained “how the developers implemented sandboxing, an important Google Chrome feature”. “Starting a sandbox involves a single call to sandbox_init() specifying which resources to block for a specific process. In our case we lock down the process pretty tightly. That means no network access, and very limited or […]

Google Chrome for Mac is coming along fine, Jeremy Moskovich explained “how the developers implemented sandboxing, an important Google Chrome feature”. “Starting a sandbox involves a single call to sandbox_init() specifying which resources to block for a specific process. In our case we lock down the process pretty tightly. That means no network access, and very limited or no access to files and Mach ports.”

Full ArticleChromium Blog