diff options
| author | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-07-15 01:41:50 +0000 |
|---|---|---|
| committer | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-07-15 01:41:50 +0000 |
| commit | 214d0fde9003f6057ec81ba54929f4ea2d2da1fb (patch) | |
| tree | 47df0fc8b9d9b28f9ba4f79821c5c79e5104f6ed /build/common.gypi | |
| parent | 880d489c99d671e440e5a7aecd6b69a7b3de57fe (diff) | |
| download | chromium_src-214d0fde9003f6057ec81ba54929f4ea2d2da1fb.zip chromium_src-214d0fde9003f6057ec81ba54929f4ea2d2da1fb.tar.gz chromium_src-214d0fde9003f6057ec81ba54929f4ea2d2da1fb.tar.bz2 | |
Linux: fix for developing on a machine with google-chrome packages installed.
The latest google-chrome packages contain a sandbox binary, which the
development builds of chromium will pick up on automatically. However,
for safety reasons, the sandbox binary will only exec a fixed chrome
binary location. Since development builds will be somewhere else in
the filesystem, this means that they will fail to start their zygote
processes and generally be very sad.
However, we /do/ want people developing with the sandbox, but we don't
want the general sandbox binary to be able to exec anything. We could
have chromium try and find its sandbox binary relative to the build
directory, but some people build on NFS and, since the sandbox binary
needs to be SUID, this won't work for them.
Instead, we add a new target: chrome_devel_sandbox which developers
can use. This builds a sandbox binary that will exec anything which is
owned by the running user. This alternative sandbox binary can be
selected by exporting CHROME_DEVEL_SANDBOX.
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@20709 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'build/common.gypi')
| -rw-r--r-- | build/common.gypi | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/build/common.gypi b/build/common.gypi index e3a2319..4cd33e1 100644 --- a/build/common.gypi +++ b/build/common.gypi @@ -83,6 +83,14 @@ 'chromeos%': 0, 'chrome_personalization%': 0, + + # Set the restrictions on the SUID sandbox binary. + # Path: only exec the hard coded chrome binary path + # User: only exec binaries owned by the running user. + # + # Developers should read + # http://code.google.com/p/chromium/wiki/LinuxSUIDSandboxDevelopment + 'linux_suid_sandbox_restrictions': 'Path', }, 'target_defaults': { 'conditions': [ |