Linux sandbox: Tighten up the NaCl sandbox policy.

chrome/test/nacl/nacl_browsertest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <stdio.h>
 #if defined(OS_POSIX)
 #include <unistd.h>
 #elif defined(OS_WIN)
 #include <windows.h>
 #endif
@@ skipping 200 matching lines @@
   RunLoadTest(FILE_PATH_LITERAL("manifest/relative_manifest.html"));
 }
 
 // Test with the NaCl debug flag turned on.
 class NaClBrowserTestPnaclDebug : public NaClBrowserTestPnacl {
  public:
   virtual void SetUpCommandLine(CommandLine* command_line) override {
     NaClBrowserTestPnacl::SetUpCommandLine(command_line);
     // Turn on debugging to influence the PNaCl URL loaded
     command_line->AppendSwitch(switches::kEnableNaClDebug);
-    // On windows, the debug stub requires --no-sandbox:
-    // crbug.com/265624
-#if defined(OS_WIN)
+    // The debug stub requires --no-sandbox:
+    // Windows bug: crbug.com/265624
     command_line->AppendSwitch(switches::kNoSandbox);
-#endif
   }
 
   // On some platforms this test does not work.
   bool TestIsBroken() {
     // TODO(jvoung): Make this test work on Windows 32-bit. When --no-sandbox
     // is used, the required 1GB sandbox address space is not reserved.
     // (see note in chrome/browser/nacl_host/test/nacl_gdb_browsertest.cc)
 #if defined(OS_WIN)
     if (base::win::OSInfo::GetInstance()->wow64_status() ==
         base::win::OSInfo::WOW64_DISABLED &&
@@ skipping 125 matching lines @@
 }
 
 // TODO(ncbray) support glibc and PNaCl
 // flaky: crbug.com/375894
 IN_PROC_BROWSER_TEST_F(NaClBrowserTestNewlibExtension, DISABLED_MimeHandler) {
   RunNaClIntegrationTest(FILE_PATH_LITERAL(
       "ppapi_extension_mime_handler.html"));
 }
 
 }  // namespace