diff options
| author | evan@chromium.org <evan@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-02-18 15:25:55 +0000 |
|---|---|---|
| committer | evan@chromium.org <evan@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-02-18 15:25:55 +0000 |
| commit | aeaf937b8a02b0a9b1c79e0e2f1d5f407313264c (patch) | |
| tree | 8c9978289be80a397c02e3f6a0bc8b69e2833cfa /chrome/renderer | |
| parent | ecbf10d164fd0a5e622a466044400e0feca4aa1d (diff) | |
| download | chromium_src-aeaf937b8a02b0a9b1c79e0e2f1d5f407313264c.zip chromium_src-aeaf937b8a02b0a9b1c79e0e2f1d5f407313264c.tar.gz chromium_src-aeaf937b8a02b0a9b1c79e0e2f1d5f407313264c.tar.bz2 | |
linux: enable seccomp sandbox by default
This is an experiment. Hopefully it will flush out problems.
Use --disable-seccomp-sandbox to turn it off.
BUG=36133
Review URL: http://codereview.chromium.org/647017
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@39358 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/renderer')
| -rw-r--r-- | chrome/renderer/renderer_main_platform_delegate_linux.cc | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/chrome/renderer/renderer_main_platform_delegate_linux.cc b/chrome/renderer/renderer_main_platform_delegate_linux.cc index bce15dd..2ab392a 100644 --- a/chrome/renderer/renderer_main_platform_delegate_linux.cc +++ b/chrome/renderer/renderer_main_platform_delegate_linux.cc @@ -40,9 +40,8 @@ bool RendererMainPlatformDelegate::EnableSandbox() { // N.b. SupportsSeccompSandbox() returns a cached result, as we already // called it earlier in the zygote. Thus, it is OK for us to not pass in // a file descriptor for "/proc". - if (CommandLine::ForCurrentProcess()->HasSwitch( - switches::kEnableSeccompSandbox) && - SupportsSeccompSandbox(-1)) { + if (!CommandLine::ForCurrentProcess()->HasSwitch( + switches::kDisableSeccompSandbox)) { StartSeccompSandbox(); } #endif |