16 lines
583 B
Text
16 lines
583 B
Text
|
Index: sandbox/policy/features.cc
|
||
|
|
--- sandbox/policy/features.cc.orig
|
||
|
|
+++ sandbox/policy/features.cc
|
||
|
|
@@ -15,7 +15,11 @@ namespace sandbox::policy::features {
|
||
|
|
// (Only causes an effect when feature kNetworkServiceInProcess is disabled.)
|
||
|
|
BASE_FEATURE(kNetworkServiceSandbox,
|
||
|
|
"NetworkServiceSandbox",
|
||
|
|
+#if BUILDFLAG(IS_BSD)
|
||
|
|
+ base::FEATURE_ENABLED_BY_DEFAULT);
|
||
|
|
+#else
|
||
|
|
base::FEATURE_DISABLED_BY_DEFAULT);
|
||
|
|
+#endif
|
||
|
|
|
||
|
|
#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
|
||
|
|
// Enables a fine-grained seccomp-BPF syscall filter for the network service.
|