| Index: services/service_manager/runner/host/linux_sandbox.cc
|
| diff --git a/services/service_manager/runner/host/linux_sandbox.cc b/services/service_manager/runner/host/linux_sandbox.cc
|
| index 46fc62fa58246935a4cac5af85649a3024371a9b..25b6798c2ac7c2edcad60f2f8900d64b3c728f19 100644
|
| --- a/services/service_manager/runner/host/linux_sandbox.cc
|
| +++ b/services/service_manager/runner/host/linux_sandbox.cc
|
| @@ -151,9 +151,9 @@ void LinuxSandbox::EngageSeccompSandbox() {
|
| openat(proc_fd_.get(), ".", O_RDONLY | O_DIRECTORY | O_CLOEXEC)));
|
| CHECK(proc_fd.is_valid());
|
| sandbox.SetProcFd(std::move(proc_fd));
|
| + // Starting the process with a sandbox failed. Missing kernel support.
|
| CHECK(
|
| - sandbox.StartSandbox(sandbox::SandboxBPF::SeccompLevel::SINGLE_THREADED))
|
| - << "Starting the process with a sandbox failed. Missing kernel support.";
|
| + sandbox.StartSandbox(sandbox::SandboxBPF::SeccompLevel::SINGLE_THREADED));
|
|
|
| // The Broker is now bound to this process and should only be destroyed when
|
| // the process exits or is killed.
|
|
|