Menu

1 / 2

Bug 2072053 - Authenticate the FELT launcher IPC peer by process id before sending managed secrets by johnreitano · Pull Request #1489 · mozilla/enterprise-firefox

GitHub Public Timeline Feed·gcp·3 days ago
#PiYJj4p4
Reading 0:00
15s threshold

requested changes

Sep 16, 2026

johnreitano

added a commit to johnreitano/enterprise-firefox that referenced this pull request

Sep 17, 2026

…, source ipc-channel from fork

Addresses review feedback on PR mozilla#1489 : - ipcChannel() takes the expected pid as a parameter (drops setExpectedIpcPeerPid + field) - authorization is pid-only and checked before the version handshake - graceful reject with NS_ERROR_PORT_ACCESS_NOT_ALLOWED (no panic); warn logs distinguish no-attestation / pid-mismatch / unsupported-version - retain_channel_if_authorized() gates retention; regression test added - keep PEER_PID_ATTESTED fail-closed for non-attested targets; corrected its comment - accurate macOS comments (OS-property, not code-enforced); revert FELT_IPC_VERSION 13->12 - source ipc-channel from the fork (johnreitano/ipc-channel) instead of the in-tree hand-edit

…efore sending managed secrets.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.