Disable yama on 3.2 kernels with 32bit userland and 64bit kernel.

sandbox/linux/services/yama_unittests.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <errno.h>
 #include <fcntl.h>
 #include <sys/ptrace.h>
 #include <sys/stat.h>
 #include <sys/types.h>
 #include <unistd.h>
@@ skipping 54 matching lines @@
   ASSERT_GE(Yama::STATUS_KNOWN | Yama::STATUS_PRESENT | Yama::STATUS_ENFORCING |
                 Yama::STATUS_STRICT_ENFORCING,
             status1);
 
   // The status should not just be a random value.
   int status2 = Yama::GetStatus();
   EXPECT_EQ(status1, status2);
 
   // This test is not running sandboxed, there is no reason to not know the
   // status.
-  EXPECT_NE(0, Yama::STATUS_KNOWN & status1);
+  if (!Yama::HasLinux32Bug()) {

[Jorge Lucangeli Obes, 2014/07/08 04:14:28]

GetStatus should still work as before.

+    EXPECT_NE(0, Yama::STATUS_KNOWN & status1);
+  }
 
   if (status1 & Yama::STATUS_STRICT_ENFORCING) {
     // If Yama is strictly enforcing, it is also enforcing.
     EXPECT_TRUE(status1 & Yama::STATUS_ENFORCING);
   }
 
   if (status1 & Yama::STATUS_ENFORCING) {
     // If Yama is enforcing, Yama is present.
     EXPECT_NE(0, status1 & Yama::STATUS_PRESENT);
   }
@@ skipping 19 matching lines @@
 // Attempts to enable or disable Yama restrictions.
 void SetYamaRestrictions(bool enable_restriction) {
   if (enable_restriction) {
     Yama::RestrictPtracersToAncestors();
   } else {
     Yama::DisableYamaRestrictions();
   }
 }
 
 TEST(Yama, RestrictPtraceWorks) {
+  if (!Yama::IsPresent())

[Jorge Lucangeli Obes, 2014/07/08 04:14:28]

This is where we should be if-casing 3.2 kernels.

+    return;
+
   ScopedProcess process1(base::Bind(&SetYamaRestrictions, true));
   ASSERT_TRUE(process1.WaitForClosureToRun());
 
   if (Yama::IsEnforcing()) {
     // A sibling process cannot ptrace process1.
     ASSERT_FALSE(CanSubProcessPtrace(process1.GetPid()));
   }
 
   if (!(Yama::GetStatus() & Yama::STATUS_STRICT_ENFORCING)) {
     // However, parent can ptrace process1.
@@ skipping 18 matching lines @@
   if (Yama::IsEnforcing()) {
     // Check that process1 is protected by Yama, even though it has
     // been created from a process that disabled Yama.
     CHECK(!CanSubProcessPtrace(process1.GetPid()));
   }
 }
 
 }  // namespace
 
 }  // namespace sandbox