There's been discussion recently about sending FDs between processes so that
renderer processes can access files directly.
I ran some tests on OS X to see whether you can send an FD when the
receiving process is sandboxed.
It turns out that this does indeed work, even when using the more
restrictive kSBXProfilePureComputation sandbox profile.
Note that support for this still needs to be added to the POSIX version of
IPC::Channel.
Best regards,
Jeremy
--~--~---------~--~----~------------~-------~--~----~
Chromium Developers mailing list: chromium-dev@googlegroups.com
View archives, change email options, or unsubscribe:
http://groups.google.com/group/chromium-dev
-~----------~----~----~----~------~----~------~--~---
