Chromium Code Reviews| Index: content/common/sandbox_seccomp_bpf_linux.cc |
| =================================================================== |
| --- content/common/sandbox_seccomp_bpf_linux.cc (revision 192603) |
| +++ content/common/sandbox_seccomp_bpf_linux.cc (working copy) |
| @@ -1386,7 +1386,7 @@ |
| case __NR_prlimit64: |
| return ErrorCode(EPERM); // See crbug.com/160157. |
| default: |
| - // These need further tightening. |
| +#if defined(TOOLKIT_GTK) |
|
jln (very slow on Chromium)
2013/04/06 00:22:23
Please, make an IfUsingToolKitGtk() function above
|
| #if defined(__x86_64__) || defined(__arm__) |
| if (IsSystemVSharedMemory(sysno)) |
| return ErrorCode(ErrorCode::ERR_ALLOWED); |
| @@ -1395,6 +1395,7 @@ |
| if (IsSystemVIpc(sysno)) |
| return ErrorCode(ErrorCode::ERR_ALLOWED); |
| #endif |
| +#endif |
| // Default on the baseline policy. |
| return BaselinePolicy(sandbox, sysno); |
| @@ -1414,7 +1415,7 @@ |
| case __NR_ioctl: |
| return ErrorCode(ENOTTY); // Flash Access. |
| default: |
| - // These need further tightening. |
| +#if defined(TOOLKIT_GTK) |
|
jln (very slow on Chromium)
2013/04/06 00:22:23
Same remark here.
|
| #if defined(__x86_64__) || defined(__arm__) |
| if (IsSystemVSharedMemory(sysno)) |
| return ErrorCode(ErrorCode::ERR_ALLOWED); |
| @@ -1423,6 +1424,7 @@ |
| if (IsSystemVIpc(sysno)) |
| return ErrorCode(ErrorCode::ERR_ALLOWED); |
| #endif |
| +#endif |
| // Default on the baseline policy. |
| return BaselinePolicy(sandbox, sysno); |