Index: content/common/sandbox_win.cc |
diff --git a/content/common/sandbox_win.cc b/content/common/sandbox_win.cc |
index 110edb8a6812438efa13d1d1549568dfdc6553b0..0c6cc0d6f043b85f5dc5a0362700754fc340c3f0 100644 |
--- a/content/common/sandbox_win.cc |
+++ b/content/common/sandbox_win.cc |
@@ -11,6 +11,7 @@ |
#include "base/debug/profiler.h" |
#include "base/files/file_util.h" |
#include "base/hash.h" |
+#include "base/logging.h" |
#include "base/memory/shared_memory.h" |
#include "base/metrics/sparse_histogram.h" |
#include "base/path_service.h" |
@@ -741,6 +742,17 @@ base::Process StartSandboxedProcess( |
return base::Process(); |
} |
+ // Allow the renderer and gpu processes to access the log file. |
+ if (type_str == switches::kRendererProcess || |
+ type_str == switches::kGpuProcess) { |
+ if (logging::IsLoggingToFileEnabled()) { |
+ DCHECK(base::FilePath(logging::GetLogFileFullPath()).IsAbsolute()); |
+ policy->AddRule(sandbox::TargetPolicy::SUBSYS_FILES, |
+ sandbox::TargetPolicy::FILES_ALLOW_ANY, |
+ logging::GetLogFileFullPath().c_str()); |
+ } |
+ } |
+ |
#if !defined(OFFICIAL_BUILD) |
// If stdout/stderr point to a Windows console, these calls will |
// have no effect. |