Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

https://chromium.googlesource.com/chromium/src/+/master/docs...

>Integrity levels are available on Windows Vista and later versions. They don‘t define a security boundary in the strict sense, but they do provide a form of mandatory access control (MAC) and act as the basis of Microsoft’s Internet Explorer sandbox.

And yes, chrome uses it as a sandbox.



To be clear, Chrome uses it as part of a "defense-in-depth" strategy, but its sandbox does not rely on it. From your link:

> So, the integrity level is a bit redundant with the other measures, but it can be seen as an additional degree of defense-in-depth, and its use has no visible impact on performance or resource usage.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: