diff options
author | apatrick@chromium.org <apatrick@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-02-23 19:22:03 +0000 |
---|---|---|
committer | apatrick@chromium.org <apatrick@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-02-23 19:22:03 +0000 |
commit | ffebdb7dba615112d89970734c071c11aac7d265 (patch) | |
tree | a16660d07a02afbca8f64d68136b803fe9c31fab /content/common/sandbox_policy.cc | |
parent | f0c5291fca5de940447fb94d04c8ea055e99e0f1 (diff) | |
download | chromium_src-ffebdb7dba615112d89970734c071c11aac7d265.zip chromium_src-ffebdb7dba615112d89970734c071c11aac7d265.tar.gz chromium_src-ffebdb7dba615112d89970734c071c11aac7d265.tar.bz2 |
Grant GPU process access to "\\\\.\\pipe\\chrome.gpu.*" on windows.
This is required on Windows 8 to establish an IPC channel between the GPU process and a renderer process.
I also made the naming of the GPU IPC channel more consistent with other channels, i.e. chrome.channel_type...
BUG=112205
TEST=http://http://get.webgl.org/ shows spinning cube on Windows 8
Review URL: https://chromiumcodereview.appspot.com/9433066
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@123295 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'content/common/sandbox_policy.cc')
-rw-r--r-- | content/common/sandbox_policy.cc | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/content/common/sandbox_policy.cc b/content/common/sandbox_policy.cc index b4690af..e35c3fa 100644 --- a/content/common/sandbox_policy.cc +++ b/content/common/sandbox_policy.cc @@ -344,6 +344,15 @@ bool AddPolicyForGPU(CommandLine* cmd_line, sandbox::TargetPolicy* policy) { sandbox::USER_LIMITED); } + // Allow the server side of GPU sockets, which are pipes that have + // the "chrome.gpu" namespace and an arbitrary suffix. + sandbox::ResultCode result = policy->AddRule( + sandbox::TargetPolicy::SUBSYS_NAMED_PIPES, + sandbox::TargetPolicy::NAMEDPIPES_ALLOW_ANY, + L"\\\\.\\pipe\\chrome.gpu.*"); + if (result != sandbox::SBOX_ALL_OK) + return false; + AddGenericDllEvictionPolicy(policy); #endif return true; |