| Index: content/browser/zygote_main_linux.cc
|
| diff --git a/content/browser/zygote_main_linux.cc b/content/browser/zygote_main_linux.cc
|
| index c56d8ea9ab00b91956e25eb788ec2c46f0d365ac..e2e174f7496741e0821d027d3912a5e2becbc575 100644
|
| --- a/content/browser/zygote_main_linux.cc
|
| +++ b/content/browser/zygote_main_linux.cc
|
| @@ -758,6 +758,7 @@ static bool EnterSandbox() {
|
| SkiaFontConfigSetImplementation(
|
| new FontConfigIPC(kMagicSandboxIPCDescriptor));
|
|
|
| +#if !defined(OS_OPENBSD)
|
| // Previously, we required that the binary be non-readable. This causes the
|
| // kernel to mark the process as non-dumpable at startup. The thinking was
|
| // that, although we were putting the renderers into a PID namespace (with
|
| @@ -783,6 +784,7 @@ static bool EnterSandbox() {
|
| return false;
|
| }
|
| }
|
| +#endif
|
| #if defined(SECCOMP_SANDBOX)
|
| } else if (SeccompSandboxEnabled()) {
|
| PreSandboxInit();
|
|
|