diff options
| author | erg <erg@chromium.org> | 2015-07-28 11:46:08 -0700 |
|---|---|---|
| committer | Commit bot <commit-bot@chromium.org> | 2015-07-28 18:46:41 +0000 |
| commit | 38edd249fa0e6b5e1e1917e6d14077467e77439c (patch) | |
| tree | fa4ac9b913ef8a8827a19b38f6d278e074af6313 /mojo/runner/switches.h | |
| parent | 24a5806209d95faea058684b03a2d5f42c18ecae (diff) | |
| download | chromium_src-38edd249fa0e6b5e1e1917e6d14077467e77439c.zip chromium_src-38edd249fa0e6b5e1e1917e6d14077467e77439c.tar.gz chromium_src-38edd249fa0e6b5e1e1917e6d14077467e77439c.tar.bz2 | |
mandoline: Enable the sandbox on clipboard and tracing.
This modifies how we bring up child processes in the mandoline
shell. When sandboxing, we must raise the sandbox before we start any
threads on Linux. So we pass the path to the binary to run on the command
line in addition to passing it through mojo, so that we can pass that
file to the seccomp sandbox's file whitelist.
This is enough to get mojo:clipboard and mojo:tracing running in a
sandbox in --enable-multiprocess mode.
BUG=492524
Review URL: https://codereview.chromium.org/1239133004
Cr-Commit-Position: refs/heads/master@{#340734}
Diffstat (limited to 'mojo/runner/switches.h')
| -rw-r--r-- | mojo/runner/switches.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/mojo/runner/switches.h b/mojo/runner/switches.h index 232c38a..1f84c9f 100644 --- a/mojo/runner/switches.h +++ b/mojo/runner/switches.h @@ -15,7 +15,9 @@ namespace switches { extern const char kApp[]; extern const char kChildProcess[]; extern const char kContentHandlers[]; +extern const char kDeleteAfterLoad[]; extern const char kDisableCache[]; +extern const char kEnableSandbox[]; extern const char kForceInProcess[]; extern const char kHelp[]; extern const char kMapOrigin[]; |