Hi dev-platform, Top-line question: Do you rely on being able to run mochitests from a packaged build (`--appname`)?
Context: The sandboxing team has been hard at work making the content process sandbox as restrictive as possible. Our latest focus is removing file read permissions from content processes -- the sandbox's value is pretty limited if a compromised content process can ship all your files off by itself! One of the things we've discovered in the process of developing these patches is that they break running mochitest on packaged firefox builds (this is the `--appname` flag to mochitest)! `try` doesn't appear to use this, and none of us use it in our development workflows, but we wanted to check in with dev-platform and see if we were going to be breaking people's development flows! While these restrictions are not on by default yet, once they are you'd only be able to run tests on packaged builds by disabling the sandbox. If this is a fundamental part of lots of folks' workflows we'll dig into whether there's a way to keep this working. Happy Monday! Alex _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
