Sandbox html_viewer on Linux.

mojo/runner/child_process.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "mojo/runner/child_process.h"
 
 #include "base/base_switches.h"
 #include "base/bind.h"
 #include "base/callback_helpers.h"
 #include "base/command_line.h"
@@ skipping 292 matching lines @@
       base::SysInfo::NumberOfProcessors();
 
       // Do whatever warming that the mojo application wants.
       typedef void (*SandboxWarmFunction)();
       SandboxWarmFunction sandbox_warm = reinterpret_cast<SandboxWarmFunction>(
           base::GetFunctionPointerFromNativeLibrary(app_library,
                                                     "MojoSandboxWarm"));
       if (sandbox_warm)
         sandbox_warm();
 
+      // TODO(erg,jln): Allowing access to all of /dev/shm/ makes it easy to
+      // spy on other shared memory using processes. This is a temporary hack
+      // so that we have some sandbox until we have proper shared memory
+      // support integrated into mojo.
       std::vector<BrokerFilePermission> permissions;
+      permissions.push_back(
+          BrokerFilePermission::ReadWriteCreateUnlinkRecursive("/dev/shm/"));
       sandbox.reset(new mandoline::LinuxSandbox(permissions));
       sandbox->Warmup();
       sandbox->EngageNamespaceSandbox();
       sandbox->EngageSeccompSandbox();
       sandbox->Seal();
     }
 #endif
   }
 
   embedder::ScopedPlatformHandle platform_channel =
@@ skipping 15 matching lines @@
   // This will block, then run whatever the controller wants.
   blocker.Block();
 
   app_context.Shutdown();
 
   return 0;
 }
 
 }  // namespace runner
 }  // namespace mojo