mirror of
https://git.freebsd.org/ports.git
synced 2025-07-04 10:59:14 -04:00
63cf4694e3
Approved by: rene (mentor, implicit) Security: https://vuxml.freebsd.org/freebsd/2f22927f-26ea-11ee-8290-a8a1599412c6.html
26 lines
1.3 KiB
C++
26 lines
1.3 KiB
C++
--- sandbox/policy/switches.cc.orig 2023-07-16 15:47:57 UTC
|
|
+++ sandbox/policy/switches.cc
|
|
@@ -53,10 +53,10 @@ const char kWindowsSystemProxyResolverSandbox[] = "pro
|
|
const char kMirroringSandbox[] = "mirroring";
|
|
#endif // BUILDFLAG(IS_MAC)
|
|
|
|
-#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS_ASH)
|
|
+#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS_ASH) || BUILDFLAG(IS_BSD)
|
|
const char kHardwareVideoDecodingSandbox[] = "hardware_video_decoding";
|
|
#endif // BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS_ASH)
|
|
-#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
|
|
+#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_BSD)
|
|
const char kHardwareVideoEncodingSandbox[] = "hardware_video_encoding";
|
|
#endif // BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
|
|
|
|
@@ -95,7 +95,9 @@ const char kGpuSandboxFailuresFatal[] = "gpu-sandbox-f
|
|
// Meant to be used as a browser-level switch for testing purposes only.
|
|
const char kNoSandbox[] = "no-sandbox";
|
|
|
|
-#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
|
|
+const char kDisableUnveil[] = "disable-unveil";
|
|
+
|
|
+#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_BSD)
|
|
// Instructs the zygote to launch without a sandbox. Processes forked from this
|
|
// type of zygote will apply their own custom sandboxes later.
|
|
const char kNoZygoteSandbox[] = "no-zygote-sandbox";
|