Disable the seccomp filter GPU process sandbox by default on Chrome OS.

content/public/common/content_switches.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/public/common/content_switches.h"
 
 namespace switches {
 
 // By default, file:// URIs cannot read other file:// URIs. This is an
 // override for developers who need the old behavior for testing.
@@ skipping 165 matching lines @@
 
 // Disable smooth scrolling for testing.
 const char kDisableSmoothScrolling[]        = "disable-smooth-scrolling";
 
 // Disable the seccomp sandbox (Linux only)
 const char kDisableSeccompSandbox[]         = "disable-seccomp-sandbox";
 
 // Disable the seccomp filter sandbox (Linux only)
 const char kDisableSeccompFilterSandbox[]   = "disable-seccomp-filter-sandbox";
 
+// Enable the seccomp filter sandbox for the GPU process (Chrome OS only)
+const char kEnableChromeOSGPUSandbox[]      = "enable-chromeos-gpu-sandbox";

[Chris Evans, 2012/06/07 23:11:34]

I think this flag should be more generic, i.e. "enable-gpu-sandbox". In the
future, there might be more cases it is useful to cover (e.g. if we end up
disabling GPU sandbox for Nvidia Linux binary driver by default)

It'd also be nice if this forced on the GPU sandbox for non-Intel chipsets on
ChromeOS. We could perhaps predicate such behaviour as ifdef DEBUG to begin
with?

[Jorge Lucangeli Obes, 2012/06/08 00:15:24]

Changed flag name, but I'm wary about using the flag to enable on non-Intel
chipsets as well. We really have no way to preemptively test the devices that
might come along, and people might run a regular Chrome OS image (with the flag)
on them.

+
 // Disable session storage.
 const char kDisableSessionStorage[]         = "disable-session-storage";
 
 // Enable shared workers. Functionality not yet complete.
 const char kDisableSharedWorkers[]          = "disable-shared-workers";
 
 // Disables site-specific tailoring to compatibility issues in WebKit.
 const char kDisableSiteSpecificQuirks[]     = "disable-site-specific-quirks";
 
 // Disables speech input.
@@ skipping 462 matching lines @@
 const char kDefaultTileWidth[]              = "default-tile-width";
 const char kDefaultTileHeight[]             = "default-tile-height";
 
 // Sets the width and height above which a composited layer will get tiled.
 const char kMaxUntiledLayerWidth[]          = "max-untiled-layer-width";
 const char kMaxUntiledLayerHeight[]         = "max-untiled-layer-height";
 
 const char kFixedPositionCreatesStackingContext[]
     = "fixed-position-creates-stacking-context";
 }  // namespace switches