From owner-freebsd-chromium@freebsd.org  Sat Jul  9 18:36:31 2016
Return-Path: <owner-freebsd-chromium@freebsd.org>
Delivered-To: freebsd-chromium@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 04B0EB84654
 for <freebsd-chromium@mailman.ysv.freebsd.org>;
 Sat,  9 Jul 2016 18:36:31 +0000 (UTC)
 (envelope-from mmacy@nextbsd.org)
Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org
 [IPv6:2001:1900:2254:206a::50:5])
 by mx1.freebsd.org (Postfix) with ESMTP id E97341E61
 for <freebsd-chromium@freebsd.org>; Sat,  9 Jul 2016 18:36:30 +0000 (UTC)
 (envelope-from mmacy@nextbsd.org)
Received: by mailman.ysv.freebsd.org (Postfix)
 id E8C48B84652; Sat,  9 Jul 2016 18:36:30 +0000 (UTC)
Delivered-To: chromium@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id E86EEB84651
 for <chromium@mailman.ysv.freebsd.org>; Sat,  9 Jul 2016 18:36:30 +0000 (UTC)
 (envelope-from mmacy@nextbsd.org)
Received: from sender163-mail.zoho.com (sender163-mail.zoho.com
 [74.201.84.163])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id C57921E60
 for <chromium@freebsd.org>; Sat,  9 Jul 2016 18:36:30 +0000 (UTC)
 (envelope-from mmacy@nextbsd.org)
Received: from mail.zoho.com by mx.zohomail.com
 with SMTP id 1468089382624291.65855564228525;
 Sat, 9 Jul 2016 11:36:22 -0700 (PDT)
Date: Sat, 09 Jul 2016 11:36:22 -0700
From: Matthew Macy <mmacy@nextbsd.org>
To: "chromium" <chromium@freebsd.org>
Message-ID: <155d0f236ad.c11b2673215986.622076744465197484@nextbsd.org>
Subject: Chromium sandboxing on FreeBSD
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Priority: Medium
User-Agent: Zoho Mail
X-Mailer: Zoho Mail
X-BeenThere: freebsd-chromium@freebsd.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: FreeBSD-specific Chromium issues <freebsd-chromium.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-chromium>, 
 <mailto:freebsd-chromium-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-chromium/>
List-Post: <mailto:freebsd-chromium@freebsd.org>
List-Help: <mailto:freebsd-chromium-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-chromium>, 
 <mailto:freebsd-chromium-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 09 Jul 2016 18:36:31 -0000


How much of Chromium's sandboxing code actually works on FreeBSD? On Linux it relies in part on user namespaces which appear to be a much more modular equivalent of jails usable by unprivileged processes.

Thanks.
-M