| Index: content/browser/zygote_main_linux.cc
|
| diff --git a/content/browser/zygote_main_linux.cc b/content/browser/zygote_main_linux.cc
|
| index 4adb25bb051032a43fee20244b75258d262dc507..6c14e342769087b354e139e222cad551c0d7dd4b 100644
|
| --- a/content/browser/zygote_main_linux.cc
|
| +++ b/content/browser/zygote_main_linux.cc
|
| @@ -758,6 +758,7 @@ static bool EnterSandbox() {
|
| SkiaFontConfigSetImplementation(
|
| new FontConfigIPC(kMagicSandboxIPCDescriptor));
|
|
|
| +#if !defined(OS_OPENBSD)
|
| // Previously, we required that the binary be non-readable. This causes the
|
| // kernel to mark the process as non-dumpable at startup. The thinking was
|
| // that, although we were putting the renderers into a PID namespace (with
|
| @@ -783,6 +784,7 @@ static bool EnterSandbox() {
|
| return false;
|
| }
|
| }
|
| +#endif
|
| #if defined(SECCOMP_SANDBOX)
|
| } else if (SeccompSandboxEnabled()) {
|
| PreSandboxInit();
|
|
|