Index: content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc |
diff --git a/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc b/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc |
index e9d5f6bb4cc5f04df2bd48eeb9cd4df44e4a5409..4c871d953e75ffd6233b56b755e507ff9f1c3f33 100644 |
--- a/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc |
+++ b/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc |
@@ -34,6 +34,10 @@ |
#include "sandbox/linux/seccomp-bpf/sandbox_bpf.h" |
#include "sandbox/linux/services/linux_syscalls.h" |
+#if !defined(IN_NACL_HELPER) |
+#include "ui/gl/gl_switches.h" |
+#endif |
+ |
using sandbox::BaselinePolicy; |
using sandbox::SandboxBPF; |
using sandbox::SyscallSets; |
@@ -167,7 +171,11 @@ scoped_ptr<SandboxBPFBasePolicy> GetGpuProcessSandbox() { |
return scoped_ptr<SandboxBPFBasePolicy>( |
new CrosArmGpuProcessPolicy(allow_sysv_shm)); |
} else { |
- return scoped_ptr<SandboxBPFBasePolicy>(new GpuProcessPolicy); |
+ bool allow_mincore = command_line.HasSwitch(switches::kUseGL) && |
+ command_line.GetSwitchValueASCII(switches::kUseGL) == |
+ gfx::kGLImplementationEGLName; |
+ return scoped_ptr<SandboxBPFBasePolicy>( |
+ new GpuProcessPolicy(allow_mincore)); |
} |
} |