Issue 1558003: linux: enable seccomp sandbox by default

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Issue 1558003: linux: enable seccomp sandbox by default (Closed)

Created:
10 years, 8 months ago by Evan Martin

Modified:
9 years, 7 months ago

Reviewers:
Mark Seaborn, agl, willchan no longer on Chromium, Markus (顧孟勤)

CC:
chromium-reviews, jam+cc_chromium.org, ben+cc_chromium.org, darin-cc_chromium.org, brettw-cc_chromium.org

Visibility:
Public.

Description

linux: enable seccomp sandbox by default It seems the best way to keep the seccomp sandbox working is to have everyone's development environment have it on by default. So we turn on the seccomp sandbox, but only for non-official builds. If the build-time flag is set: --disable-seccomp-sandbox turns it off. If the build-time flag is *not* set: --enable-seccomp-sandbox turns it on. BUG=36133 Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=43122

	Unified diffs	Side-by-side diffs	Delta from patch set	Stats (+57 lines, -17 lines)			Patch
M	build/common.gypi	View		2 chunks	+7 lines, -0 lines	0 comments	Download
M	chrome/browser/renderer_host/browser_render_process_host.cc	View	1 2	1 chunk	+4 lines, -0 lines	0 comments	Download
M	chrome/browser/zygote_host_linux.cc	View		1 chunk	+6 lines, -2 lines	0 comments	Download
M	chrome/browser/zygote_main_linux.cc	View		3 chunks	+3 lines, -7 lines	0 comments	Download
M	chrome/common/chrome_switches.h	View	1 2	2 chunks	+8 lines, -1 line	0 comments	Download
M	chrome/common/chrome_switches.cc	View	1 2	3 chunks	+22 lines, -3 lines	0 comments	Download
M	chrome/renderer/renderer_main_platform_delegate_linux.cc	View		1 chunk	+1 line, -4 lines	0 comments	Download
M	chrome/test/nacl/nacl_test.cc	View	3	1 chunk	+6 lines, -0 lines	0 comments	Download

Messages

Total messages: 3 (0 generated)

Expand Messages | Collapse Messages

+NaCL master, please take a look at my NaCL change.

Expand Messages | Collapse Messages

Issue 1558003: linux: enable seccomp sandbox by default (Closed)

Description

Patch Set 1 #

Patch Set 2 : merge #

Patch Set 3 : nacl unit test #

Patch Set 4 : better #

Messages