From c30a6232df03e1efbd9f3b226777b07e087a1122 Mon Sep 17 00:00:00 2001 From: Allan Sandfeld Jensen Date: Mon, 12 Oct 2020 14:27:29 +0200 Subject: BASELINE: Update Chromium to 85.0.4183.140 Change-Id: Iaa42f4680837c57725b1344f108c0196741f6057 Reviewed-by: Allan Sandfeld Jensen --- chromium/docs/design/sandbox.md | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'chromium/docs/design') diff --git a/chromium/docs/design/sandbox.md b/chromium/docs/design/sandbox.md index 47bf871bf41..a73501f8c00 100644 --- a/chromium/docs/design/sandbox.md +++ b/chromium/docs/design/sandbox.md @@ -463,6 +463,14 @@ Rules can only be added before each target process is spawned, and cannot be modified while a target is running, but different targets can have different rules. +### Diagnostics + +In Chromium, the policies associated with active processes can be viewed at +chrome://sandbox. Tracing of the `sandbox` category will output the policy used +when a process is launched. Tracing can be enabled using chrome://tracing or by +using the `--trace-startup=-*,disabled-by-default-sandbox` command line flag. +Trace output can be investigated with `//tools/win/trace-sandbox-viewer.py`. + ## Target bootstrapping Targets do not start executing with the restrictions specified by policy. They -- cgit v1.2.1