diff options
| author | jln@chromium.org <jln@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-08-02 23:27:26 +0000 |
|---|---|---|
| committer | jln@chromium.org <jln@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-08-02 23:27:26 +0000 |
| commit | e7a01ec476ef180cca0a573d266f1d06be4d59ee (patch) | |
| tree | 02924b354f04b2a8716d6d49395144e61204b7e4 /content/browser/zygote_host | |
| parent | 7fabd76ecf3397678aa5bac6d1325af486895380 (diff) | |
| download | chromium_src-e7a01ec476ef180cca0a573d266f1d06be4d59ee.zip chromium_src-e7a01ec476ef180cca0a573d266f1d06be4d59ee.tar.gz chromium_src-e7a01ec476ef180cca0a573d266f1d06be4d59ee.tar.bz2 | |
Create a class for seccomp-bpf sandboxing in content.
This adds a SandboxSeccompBpf class to centralize Seccomp BPF sandbox
policies inside of content/
LinuxSandbox is the only user of this class and Linux sandboxing is now fully
unified through LinuxSandbox.
BUG=
NOTRY=true
Review URL: https://chromiumcodereview.appspot.com/10843042
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@149738 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'content/browser/zygote_host')
| -rw-r--r-- | content/browser/zygote_host/zygote_host_impl_linux.cc | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/content/browser/zygote_host/zygote_host_impl_linux.cc b/content/browser/zygote_host/zygote_host_impl_linux.cc index f34df1c..e065273 100644 --- a/content/browser/zygote_host/zygote_host_impl_linux.cc +++ b/content/browser/zygote_host/zygote_host_impl_linux.cc @@ -100,11 +100,13 @@ void ZygoteHostImpl::Init(const std::string& sandbox_cmd) { switches::kVModule, switches::kRegisterPepperPlugins, switches::kDisableSeccompSandbox, + switches::kDisableSeccompFilterSandbox, switches::kEnableSeccompSandbox, // Zygote process needs to know what resources to have loaded when it // becomes a renderer process. switches::kForceDeviceScaleFactor, switches::kLoad2xResources, + switches::kNoSandbox, }; cmd_line.CopySwitchesFrom(browser_command_line, kForwardSwitches, arraysize(kForwardSwitches)); |