Set allow_new_privs when launching CRD host controller from the NM process.

remoting/host/setup/daemon_controller_delegate_linux.cc

Index: remoting/host/setup/daemon_controller_delegate_linux.cc
diff --git a/remoting/host/setup/daemon_controller_delegate_linux.cc b/remoting/host/setup/daemon_controller_delegate_linux.cc
index 5bc659d2dc67aabfd560b0479bbb3706394b8839..c3d0d0e97a9f39279fdd730e306191a655a67004 100644
--- a/remoting/host/setup/daemon_controller_delegate_linux.cc
+++ b/remoting/host/setup/daemon_controller_delegate_linux.cc
@@ -26,6 +26,7 @@
 #include "base/strings/string_util.h"
 #include "base/thread_task_runner_handle.h"
 #include "base/values.h"
+#include "build/build_config.h"
 #include "net/base/net_util.h"
 #include "remoting/host/host_config.h"
 #include "remoting/host/json_host_config.h"
@@ -101,6 +102,11 @@ bool RunHostScriptWithTimeout(
   fds_to_remap.push_back(std::pair<int, int>(STDERR_FILENO, STDOUT_FILENO));
   base::LaunchOptions options;
   options.fds_to_remap = &fds_to_remap;
+
+#if defined(OS_LINUX) && !defined(OS_CHROMEOS)

[Lambros, 2014/05/31 00:42:20]

Maybe remove OS_LINUX, since this file is .._linux.cc ?

[Sergey Ulanov, 2014/05/31 00:45:32]

Done.

+  options.allow_new_privs = true;
+#endif
+
   if (!base::LaunchProcess(command_line, options, &process_handle)) {
     LOG(ERROR) << "Failed to run command: "
                << command_line.GetCommandLineString();