OLD | NEW |
1 # Linux SUID Sandbox Development | 1 # Linux SUID Sandbox Development |
2 | 2 |
| 3 *IMPORTANT NOTE: The Linux SUID sandbox is almost but not completely removed. |
| 4 See https://bugs.chromium.org/p/chromium/issues/detail?id=598454 |
| 5 This page is mostly out-of-date.* |
| 6 |
3 For context see [LinuxSUIDSandbox](linux_suid_sandbox.md) | 7 For context see [LinuxSUIDSandbox](linux_suid_sandbox.md) |
4 | 8 |
5 We need a SUID helper binary to turn on the sandbox on Linux. | 9 We need a SUID helper binary to turn on the sandbox on Linux. |
6 | 10 |
7 In most cases, you can run `build/update-linux-sandbox.sh` and it'll install | 11 In most cases, you can run `build/update-linux-sandbox.sh` and it'll install |
8 the proper sandbox for you in `/usr/local/sbin` and tell you to update your | 12 the proper sandbox for you in `/usr/local/sbin` and tell you to update your |
9 `.bashrc` if needed. | 13 `.bashrc` if needed. |
10 | 14 |
11 ## Installation instructions for developers | 15 ## Installation instructions for developers |
12 | 16 |
(...skipping 60 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
73 | 77 |
74 You can also make such an installation more permanent by following the | 78 You can also make such an installation more permanent by following the |
75 [steps above](#Installation-Instructions-for-developers) and installing | 79 [steps above](#Installation-Instructions-for-developers) and installing |
76 `chrome_sandbox` to a more permanent location. | 80 `chrome_sandbox` to a more permanent location. |
77 | 81 |
78 ## System-wide installations of Chromium | 82 ## System-wide installations of Chromium |
79 | 83 |
80 The `CHROME_DEVEL_SANDBOX` variable is intended for developers and won't work | 84 The `CHROME_DEVEL_SANDBOX` variable is intended for developers and won't work |
81 for a system-wide installation of Chromium. Package maintainers should make sure | 85 for a system-wide installation of Chromium. Package maintainers should make sure |
82 the `setuid` binary is installed and defined in GYP as `linux_sandbox_path`. | 86 the `setuid` binary is installed and defined in GYP as `linux_sandbox_path`. |
OLD | NEW |