diff options
| author | rsesek@chromium.org <rsesek@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2014-04-05 20:38:33 +0000 |
|---|---|---|
| committer | rsesek@chromium.org <rsesek@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2014-04-05 20:38:33 +0000 |
| commit | 8c215f5b965930c1faa004834491e4e11c6b26d8 (patch) | |
| tree | 590df889bf205bbbe27fcab6a2a9a7dfedca0f14 /content/common | |
| parent | b34ba81bf44cb89894b33f732a29310a5bd6323e (diff) | |
| download | chromium_src-8c215f5b965930c1faa004834491e4e11c6b26d8.zip chromium_src-8c215f5b965930c1faa004834491e4e11c6b26d8.tar.gz chromium_src-8c215f5b965930c1faa004834491e4e11c6b26d8.tar.bz2 | |
sandbox: Add support for starting seccomp-bpf with threads.
This requires an experimental kernel patch that has not yet been accepted
upstream. However this is a prerequisite for getting running seccomp-bpf under
Android.
BUG=308763, 308775
Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=261951
Reverted: https://src.chromium.org/viewvc/chrome?view=rev&revision=261959
Review URL: https://codereview.chromium.org/224403002
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@262035 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'content/common')
| -rw-r--r-- | content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc b/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc index 6d32be5..8a6fa72 100644 --- a/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc +++ b/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc @@ -159,7 +159,7 @@ void StartSandboxWithPolicy(sandbox::SandboxBPFPolicy* policy) { // doing so does not stop the sandbox. SandboxBPF sandbox; sandbox.SetSandboxPolicy(policy); - sandbox.StartSandbox(); + CHECK(sandbox.StartSandbox(SandboxBPF::PROCESS_SINGLE_THREADED)); } // nacl_helper needs to be tiny and includes only part of content/ |