commit | 6553be42a327754d179cc80048b438b58e7c9c9b | [log] [tgz] |
---|---|---|
author | Wei Li <weili@chromium.org> | Wed Oct 04 21:06:52 2017 |
committer | Commit Bot <commit-bot@chromium.org> | Wed Oct 04 21:06:52 2017 |
tree | 66f4d5b39f91b5c4d449bcd77f6d6a2a9df94093 | |
parent | ca8aafdd01d5a02985bf4bf239e82c8fa346c499 [diff] |
Setup proper sandbox policy for pdf compositor service Pdf compositor service is a utility service that uses skia to render and generate pdf document. Thus it needs to access local font system. On Linux, it needs 'uname' to get user agent. So, on Windows and Mac, it resembles ppapi process in term of sandbox policy. On Linux, it is closer to utility process's sandbox requirements. To make its requirements clear, we create a new service sandbox type for it, and apply appropriate policy on different platforms. TBR=jam@chromium.org BUG=455764 Change-Id: I7c7aeb40e5e0b09fe29887532c06d2abc04969d6 Reviewed-on: https://chromium-review.googlesource.com/695781 Commit-Queue: Wei Li <weili@chromium.org> Reviewed-by: Robert Sesek <rsesek@chromium.org> Reviewed-by: Tom Sepez <tsepez@chromium.org> Reviewed-by: Will Harris <wfh@chromium.org> Cr-Commit-Position: refs/heads/master@{#506514}
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .