| Index: content/common/sandbox_linux/bpf_renderer_policy_linux.cc
|
| diff --git a/content/common/sandbox_linux/bpf_renderer_policy_linux.cc b/content/common/sandbox_linux/bpf_renderer_policy_linux.cc
|
| index 993e2a50d4d4951d5d99239a8607aa11f7ca3f88..a3e74389425729b4762cb22e7d5acddd717a3281 100644
|
| --- a/content/common/sandbox_linux/bpf_renderer_policy_linux.cc
|
| +++ b/content/common/sandbox_linux/bpf_renderer_policy_linux.cc
|
| @@ -15,10 +15,6 @@
|
| #include "sandbox/linux/seccomp-bpf-helpers/syscall_sets.h"
|
| #include "sandbox/linux/system_headers/linux_syscalls.h"
|
|
|
| -#if defined(USE_VGEM_MAP)
|
| -#include <libdrm/vgem_drm.h>
|
| -#endif
|
| -
|
| using sandbox::SyscallSets;
|
| using sandbox::bpf_dsl::Allow;
|
| using sandbox::bpf_dsl::Arg;
|
| @@ -34,13 +30,6 @@ ResultExpr RestrictIoctl() {
|
| return Switch(request)
|
| .SANDBOX_BPF_DSL_CASES((static_cast<unsigned long>(TCGETS), FIONREAD),
|
| Allow())
|
| -#if defined(USE_VGEM_MAP)
|
| - // Type of DRM_IOCTL_XXX is unsigned long on IA and unsigned int on ARM.
|
| - .SANDBOX_BPF_DSL_CASES(
|
| - (static_cast<unsigned long>(DRM_IOCTL_GEM_CLOSE),
|
| - DRM_IOCTL_VGEM_MODE_MAP_DUMB, DRM_IOCTL_PRIME_FD_TO_HANDLE),
|
| - Allow())
|
| -#endif
|
| .Default(sandbox::CrashSIGSYSIoctl());
|
| }
|
|
|
|
|