Index: content/common/sandbox_seccomp_bpf_linux.cc |
=================================================================== |
--- content/common/sandbox_seccomp_bpf_linux.cc (revision 192603) |
+++ content/common/sandbox_seccomp_bpf_linux.cc (working copy) |
@@ -1386,7 +1386,7 @@ |
case __NR_prlimit64: |
return ErrorCode(EPERM); // See crbug.com/160157. |
default: |
- // These need further tightening. |
+#if defined(TOOLKIT_GTK) |
jln (very slow on Chromium)
2013/04/06 00:22:23
Please, make an IfUsingToolKitGtk() function above
|
#if defined(__x86_64__) || defined(__arm__) |
if (IsSystemVSharedMemory(sysno)) |
return ErrorCode(ErrorCode::ERR_ALLOWED); |
@@ -1395,6 +1395,7 @@ |
if (IsSystemVIpc(sysno)) |
return ErrorCode(ErrorCode::ERR_ALLOWED); |
#endif |
+#endif |
// Default on the baseline policy. |
return BaselinePolicy(sandbox, sysno); |
@@ -1414,7 +1415,7 @@ |
case __NR_ioctl: |
return ErrorCode(ENOTTY); // Flash Access. |
default: |
- // These need further tightening. |
+#if defined(TOOLKIT_GTK) |
jln (very slow on Chromium)
2013/04/06 00:22:23
Same remark here.
|
#if defined(__x86_64__) || defined(__arm__) |
if (IsSystemVSharedMemory(sysno)) |
return ErrorCode(ErrorCode::ERR_ALLOWED); |
@@ -1423,6 +1424,7 @@ |
if (IsSystemVIpc(sysno)) |
return ErrorCode(ErrorCode::ERR_ALLOWED); |
#endif |
+#endif |
// Default on the baseline policy. |
return BaselinePolicy(sandbox, sysno); |