blob: 0ec98f987d6d1c9d01bdc95064d1404d94caf319 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
--- src/3rdparty/chromium/content/gpu/gpu_sandbox_hook_bsd.cc.orig 2023-04-28 17:01:32 UTC
+++ src/3rdparty/chromium/content/gpu/gpu_sandbox_hook_bsd.cc
@@ -0,0 +1,69 @@
+// Copyright 2023 The Chromium Authors
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "content/gpu/gpu_sandbox_hook_bsd.h"
+
+#include <dlfcn.h>
+#include <errno.h>
+#include <sys/stat.h>
+
+#include <memory>
+#include <sstream>
+#include <utility>
+#include <vector>
+
+#include "base/base_paths.h"
+#include "base/files/file_enumerator.h"
+#include "base/files/file_path.h"
+#include "base/files/scoped_file.h"
+#include "base/functional/bind.h"
+#include "base/logging.h"
+#include "base/path_service.h"
+#include "base/strings/stringprintf.h"
+#include "build/build_config.h"
+#include "build/buildflag.h"
+#include "build/chromeos_buildflags.h"
+#include "content/common/set_process_title.h"
+#include "content/public/common/content_switches.h"
+#include "media/gpu/buildflags.h"
+
+namespace content {
+namespace {
+
+constexpr int dlopen_flag = RTLD_NOW | RTLD_GLOBAL | RTLD_NODELETE;
+
+void LoadVulkanLibraries() {
+ // Try to preload Vulkan libraries. Failure is not an error as not all may be
+ // present.
+ const char* kLibraries[] = {
+ "libvulkan.so",
+ "libvulkan_intel.so",
+ "libvulkan_intel_hasvk.so",
+ "libvulkan_radeon.so",
+ };
+ for (const auto* library : kLibraries) {
+ dlopen(library, dlopen_flag);
+ }
+}
+
+bool LoadLibrariesForGpu(
+ const sandbox::policy::SandboxSeccompBPF::Options& options) {
+ LoadVulkanLibraries();
+
+ return true;
+}
+
+} // namespace
+
+bool GpuProcessPreSandboxHook(sandbox::policy::SandboxLinux::Options options) {
+ if (!LoadLibrariesForGpu(options))
+ return false;
+
+ // TODO(tsepez): enable namspace sandbox here once crashes are understood.
+
+ errno = 0;
+ return true;
+}
+
+} // namespace content
|
