diff options
Diffstat (limited to 'chromium/docs/design/sandbox.md')
| -rw-r--r-- | chromium/docs/design/sandbox.md | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/chromium/docs/design/sandbox.md b/chromium/docs/design/sandbox.md index 47bf871bf41..a73501f8c00 100644 --- a/chromium/docs/design/sandbox.md +++ b/chromium/docs/design/sandbox.md @@ -463,6 +463,14 @@ Rules can only be added before each target process is spawned, and cannot be modified while a target is running, but different targets can have different rules. +### Diagnostics + +In Chromium, the policies associated with active processes can be viewed at +chrome://sandbox. Tracing of the `sandbox` category will output the policy used +when a process is launched. Tracing can be enabled using chrome://tracing or by +using the `--trace-startup=-*,disabled-by-default-sandbox` command line flag. +Trace output can be investigated with `//tools/win/trace-sandbox-viewer.py`. + ## Target bootstrapping Targets do not start executing with the restrictions specified by policy. They |