[Linux] Use PR_SET_NO_NEW_PRIVS by default in base/process/launch.h.

chrome/browser/printing/cloud_print/test/cloud_print_policy_browsertest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/command_line.h"
 #include "base/path_service.h"
 #include "base/process/kill.h"
 #include "base/process/launch.h"
 #include "base/test/test_timeouts.h"
 #include "chrome/browser/chrome_notification_types.h"
@@ skipping 27 matching lines @@
 
   base::FilePath test_file_path = ui_test_utils::GetTestFilePath(
       base::FilePath(), base::FilePath().AppendASCII("empty.html"));
   CommandLine new_command_line(GetCommandLineForRelaunch());
   new_command_line.AppendArgPath(test_file_path);
 
   content::WindowedNotificationObserver observer(
       chrome::NOTIFICATION_TAB_ADDED,
       content::NotificationService::AllSources());
 
+  base::LaunchOptions options;
+#if defined(OS_LINUX)
+  // To prevent accidental privilege sharing to an untrusted child, processes
+  // are started with PR_SET_NO_NEW_PRIVS. Do not set that here, since this
+  // new child will be a test browser process.
+  options.allow_new_privs = true;
+#endif
   base::ProcessHandle handle;
   bool launched =
-      base::LaunchProcess(new_command_line, base::LaunchOptions(), &handle);
+      base::LaunchProcess(new_command_line, options, &handle);
   EXPECT_TRUE(launched);
 
   observer.Wait();
 
   int exit_code = -100;
   bool exited =
       base::WaitForExitCodeWithTimeout(handle, &exit_code,
                                        TestTimeouts::action_timeout());
 
   EXPECT_TRUE(exited);
   EXPECT_EQ(chrome::RESULT_CODE_NORMAL_EXIT_PROCESS_NOTIFIED, exit_code);
   base::CloseProcessHandle(handle);
 }
 
 // Disabled due to http://crbug.com/144393.
 IN_PROC_BROWSER_TEST_F(CloudPrintPolicyTest, DISABLED_CloudPrintPolicyFlag) {
   CommandLine new_command_line(GetCommandLineForRelaunch());
   new_command_line.AppendSwitch(switches::kCheckCloudPrintConnectorPolicy);
 
+  base::LaunchOptions options;
+#if defined(OS_LINUX)
+  // To prevent accidental privilege sharing to an untrusted child, processes
+  // are started with PR_SET_NO_NEW_PRIVS. Do not set that here, since this
+  // new child will be a test browser process.
+  options.allow_new_privs = true;
+#endif
   base::ProcessHandle handle;
   bool launched =
-      base::LaunchProcess(new_command_line, base::LaunchOptions(), &handle);
+      base::LaunchProcess(new_command_line, options, &handle);
   EXPECT_TRUE(launched);
 
   int exit_code = -100;
   bool exited =
       base::WaitForExitCodeWithTimeout(handle, &exit_code,
                                        TestTimeouts::action_timeout());
 
   EXPECT_TRUE(exited);
   EXPECT_EQ(content::RESULT_CODE_NORMAL_EXIT, exit_code);
   base::CloseProcessHandle(handle);
 }
 
 }  // namespace