Index: content/common/sandbox_linux/bpf_renderer_policy_linux.cc |
diff --git a/content/common/sandbox_linux/bpf_renderer_policy_linux.cc b/content/common/sandbox_linux/bpf_renderer_policy_linux.cc |
index 993e2a50d4d4951d5d99239a8607aa11f7ca3f88..3be9ec81ed32f28710c50775eeb59ecf34f7c98e 100644 |
--- a/content/common/sandbox_linux/bpf_renderer_policy_linux.cc |
+++ b/content/common/sandbox_linux/bpf_renderer_policy_linux.cc |
@@ -5,6 +5,7 @@ |
#include "content/common/sandbox_linux/bpf_renderer_policy_linux.h" |
#include <errno.h> |
+#include <libdrm/drm.h> |
mdempsky
2016/03/24 19:18:14
Why is this needed? I think it can be removed too
vignatti (out of this project)
2016/03/24 19:54:56
Done.
|
#include <sys/ioctl.h> |
#include "build/build_config.h" |
@@ -15,10 +16,6 @@ |
#include "sandbox/linux/seccomp-bpf-helpers/syscall_sets.h" |
#include "sandbox/linux/system_headers/linux_syscalls.h" |
-#if defined(USE_VGEM_MAP) |
-#include <libdrm/vgem_drm.h> |
-#endif |
- |
using sandbox::SyscallSets; |
using sandbox::bpf_dsl::Allow; |
using sandbox::bpf_dsl::Arg; |
@@ -34,13 +31,6 @@ ResultExpr RestrictIoctl() { |
return Switch(request) |
.SANDBOX_BPF_DSL_CASES((static_cast<unsigned long>(TCGETS), FIONREAD), |
Allow()) |
-#if defined(USE_VGEM_MAP) |
- // Type of DRM_IOCTL_XXX is unsigned long on IA and unsigned int on ARM. |
- .SANDBOX_BPF_DSL_CASES( |
- (static_cast<unsigned long>(DRM_IOCTL_GEM_CLOSE), |
- DRM_IOCTL_VGEM_MODE_MAP_DUMB, DRM_IOCTL_PRIME_FD_TO_HANDLE), |
- Allow()) |
-#endif |
.Default(sandbox::CrashSIGSYSIoctl()); |
} |