summaryrefslogtreecommitdiffstats
path: root/content/common/sandbox_policy.cc
diff options
context:
space:
mode:
authorapatrick@chromium.org <apatrick@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2012-02-23 19:22:03 +0000
committerapatrick@chromium.org <apatrick@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2012-02-23 19:22:03 +0000
commitffebdb7dba615112d89970734c071c11aac7d265 (patch)
treea16660d07a02afbca8f64d68136b803fe9c31fab /content/common/sandbox_policy.cc
parentf0c5291fca5de940447fb94d04c8ea055e99e0f1 (diff)
downloadchromium_src-ffebdb7dba615112d89970734c071c11aac7d265.zip
chromium_src-ffebdb7dba615112d89970734c071c11aac7d265.tar.gz
chromium_src-ffebdb7dba615112d89970734c071c11aac7d265.tar.bz2
Grant GPU process access to "\\\\.\\pipe\\chrome.gpu.*" on windows.
This is required on Windows 8 to establish an IPC channel between the GPU process and a renderer process. I also made the naming of the GPU IPC channel more consistent with other channels, i.e. chrome.channel_type... BUG=112205 TEST=http://http://get.webgl.org/ shows spinning cube on Windows 8 Review URL: https://chromiumcodereview.appspot.com/9433066 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@123295 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'content/common/sandbox_policy.cc')
-rw-r--r--content/common/sandbox_policy.cc9
1 files changed, 9 insertions, 0 deletions
diff --git a/content/common/sandbox_policy.cc b/content/common/sandbox_policy.cc
index b4690af..e35c3fa 100644
--- a/content/common/sandbox_policy.cc
+++ b/content/common/sandbox_policy.cc
@@ -344,6 +344,15 @@ bool AddPolicyForGPU(CommandLine* cmd_line, sandbox::TargetPolicy* policy) {
sandbox::USER_LIMITED);
}
+ // Allow the server side of GPU sockets, which are pipes that have
+ // the "chrome.gpu" namespace and an arbitrary suffix.
+ sandbox::ResultCode result = policy->AddRule(
+ sandbox::TargetPolicy::SUBSYS_NAMED_PIPES,
+ sandbox::TargetPolicy::NAMEDPIPES_ALLOW_ANY,
+ L"\\\\.\\pipe\\chrome.gpu.*");
+ if (result != sandbox::SBOX_ALL_OK)
+ return false;
+
AddGenericDllEvictionPolicy(policy);
#endif
return true;