Chromium Code Reviews| Index: content/browser/zygote_main_linux.cc |
| diff --git a/content/browser/zygote_main_linux.cc b/content/browser/zygote_main_linux.cc |
| index 4adb25bb051032a43fee20244b75258d262dc507..c3821c00650eaa6e5a44d04e8097c507ac4a8cb6 100644 |
| --- a/content/browser/zygote_main_linux.cc |
| +++ b/content/browser/zygote_main_linux.cc |
| @@ -758,6 +758,7 @@ static bool EnterSandbox() { |
| SkiaFontConfigSetImplementation( |
| new FontConfigIPC(kMagicSandboxIPCDescriptor)); |
| +#if defined(OS_LINUX) |
|
Mark Mentovai
2011/10/26 23:24:28
And here.
Robert Nagy
2011/10/31 15:38:38
Done.
|
| // Previously, we required that the binary be non-readable. This causes the |
| // kernel to mark the process as non-dumpable at startup. The thinking was |
| // that, although we were putting the renderers into a PID namespace (with |
| @@ -783,6 +784,7 @@ static bool EnterSandbox() { |
| return false; |
| } |
| } |
| +#endif |
| #if defined(SECCOMP_SANDBOX) |
| } else if (SeccompSandboxEnabled()) { |
| PreSandboxInit(); |