Skip to content

Commit

Permalink
Merge branch 'staging'
Browse files Browse the repository at this point in the history
  • Loading branch information
rpavlik committed Aug 24, 2021
2 parents 0d422b9 + acbd6fc commit 9a409d0
Show file tree
Hide file tree
Showing 2 changed files with 8 additions and 6 deletions.
1 change: 1 addition & 0 deletions specification/registry/xr.xml
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,7 @@ maintained in the default branch of the Khronos OpenXR GitHub project.
<!-- SECTION: OpenXR vendor/author tags for extensions and layers -->
<tags>
<!-- Sorted alphabetically by tag name -->
<tag name="ALMALENCE" author="Almalence" contact="Ivan Chupakhin @ivan.chupakhin, Dmitry Shmunk @dmitry.shmunk"/>
<tag name="ARM" author="Arm Limited" contact="Andreas Loeve Selvik @selvik, Sam Martin @sammartin"/>
<tag name="COLLABORA" author="Collabora" contact="Ryan Pavlik @rpavlik"/>
<tag name="EPIC" author="Epic" contact="Nick Whiting @whitingn"/>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,9 @@

include::../meta/XR_EXT_win32_appcontainer_compatible.adoc[]

:url-appcontainer-isolation: https://docs.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation
:url-appcontainer-impl: https://docs.microsoft.com/en-us/windows/win32/secauthz/implementing-an-appcontainer

*Last Modified Date*::
2019-12-16
*IP Status*::
Expand All @@ -18,13 +21,11 @@ include::../meta/XR_EXT_win32_appcontainer_compatible.adoc[]
*Overview*

To minimize opportunities for malicious manipulation, a common practice on
the Windows OS is to isolate the application process in an [AppContainer
execution environment]
(https://docs.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation).
the Windows OS is to isolate the application process in an {url-appcontainer-isolation}[AppContainer
execution environment].
In order for a runtime to work properly in such an application process, the
runtime must: properly [set ACL to device resources and cross process
resources]
(https://docs.microsoft.com/en-us/windows/win32/secauthz/implementing-an-appcontainer).
runtime must: properly {url-appcontainer-impl}[set ACL to device resources and cross process
resources].

An application running in an AppContainer process can: request for a runtime
to enable such AppContainer compatibility by adding
Expand Down

0 comments on commit 9a409d0

Please sign in to comment.