linux: enable seccomp sandbox by default

chrome/browser/renderer_host/browser_render_process_host.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Represents the browser side of the browser <--> renderer communication
 // channel. There will be one RenderProcessHost per renderer process.
 
 #include "chrome/browser/renderer_host/browser_render_process_host.h"
 
 #include <algorithm>
@@ skipping 475 matching lines @@
     const CommandLine& browser_cmd,
     CommandLine* renderer_cmd) const {
   // Propagate the following switches to the renderer command line (along
   // with any associated values) if present in the browser command line.
   static const char* const switch_names[] = {
     switches::kRendererAssertTest,
     switches::kRendererCrashTest,
     switches::kRendererStartupDialog,
     switches::kNoSandbox,
     switches::kTestSandbox,
-    switches::kEnableSeccompSandbox,
+    switches::kDisableSeccompSandbox,
 #if !defined (GOOGLE_CHROME_BUILD)
     // These are unsupported and not fully tested modes, so don't enable them
     // for official Google Chrome builds.
     switches::kInProcessPlugins,
 #if defined(OS_MACOSX)
     // TODO(dspringer): remove this when NaCl x86-32 security issues are fixed
     switches::kEnableNaClOnMac,
 #endif  // OS_MACOSX
 #endif  // GOOGLE_CHROME_BUILD
     switches::kDomAutomationController,
@@ skipping 492 matching lines @@
         IPC::InvalidPlatformFileForTransit(),
         std::vector<std::string>(),
         std::string(),
         false));
   }
 }
 
 void BrowserRenderProcessHost::EnableAutoSpellCorrect(bool enable) {
   Send(new ViewMsg_SpellChecker_EnableAutoSpellCorrect(enable));
 }