Skip to content

Commit 914f723

Browse files
committed
Disable sandbox AppLocker on Vista
1 parent 339b121 commit 914f723

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -277,6 +277,9 @@ static void AddDeveloperRepoDirToPolicy(sandbox::TargetPolicy* aPolicy) {
277277
#undef WSTRING
278278

279279
static void EnsureAppLockerAccess(sandbox::TargetPolicy* aPolicy) {
280+
if (!IsWin7OrLater()) {
281+
return;
282+
}
280283
if (aPolicy->GetLockdownTokenLevel() < sandbox::USER_LIMITED) {
281284
// The following rules are to allow DLLs to be loaded when the token level
282285
// blocks access to AppLocker. If the sandbox does not allow access to the

0 commit comments

Comments
 (0)