diff options
| author | mseaborn@chromium.org <mseaborn@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-03-09 18:58:00 +0000 |
|---|---|---|
| committer | mseaborn@chromium.org <mseaborn@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-03-09 18:58:00 +0000 |
| commit | 9aaa3227b1f1a98146facdcbed5dbdba28a93f1c (patch) | |
| tree | e0ce2020942420a62fff2356e1c15b4a8260dc28 /chrome/browser/nacl_host | |
| parent | 2d9ebb01b983db2a3cd7514c658e54a3cb76bc5e (diff) | |
| download | chromium_src-9aaa3227b1f1a98146facdcbed5dbdba28a93f1c.zip chromium_src-9aaa3227b1f1a98146facdcbed5dbdba28a93f1c.tar.gz chromium_src-9aaa3227b1f1a98146facdcbed5dbdba28a93f1c.tar.bz2 | |
Run NaCl itself in Chromium's Linux sandbox
This is achieved by forking the NaCl loader process (Chromium's
compiled-in sel_ldr) from the Zygote process.
This leaves the sel_ldr with a little excess authority, because it has
access to the IPC methods (e.g. for fonts) implemented in
render_sandbox_host_linux.cc.
BUG=36676
TEST=nacl_ui_tests
Review URL: http://codereview.chromium.org/669274
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@41056 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/browser/nacl_host')
| -rw-r--r-- | chrome/browser/nacl_host/nacl_process_host.cc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/chrome/browser/nacl_host/nacl_process_host.cc b/chrome/browser/nacl_host/nacl_process_host.cc index 1114cb7..58b689f 100644 --- a/chrome/browser/nacl_host/nacl_process_host.cc +++ b/chrome/browser/nacl_host/nacl_process_host.cc @@ -104,7 +104,7 @@ bool NaClProcessHost::LaunchSelLdr() { #if defined(OS_WIN) FilePath(), #elif defined(OS_POSIX) - false, + true, // use_zygote base::environment_vector(), #endif cmd_line); |