Add update-linux-sandbox.sh to build/

build/update-linux-sandbox.sh

+#!/bin/sh
+
+# Copyright (c) 2012 The Chromium Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+BUILDTYPE="${BUILDTYPE:-Debug}"
+CHROME_SRC_DIR="${CHROME_SRC_DIR:-$(dirname -- $(readlink -fn -- "$0"))/..}"
+CHROME_OUT_DIR="${CHROME_SRC_DIR}/out/${BUILDTYPE}"
+CHROME_SANDBOX_BUILD_PATH="${CHROME_OUT_DIR}/chrome_sandbox"
+# Make sure the path below is not on NFS!

[Lei Zhang, 2012/06/06 07:39:33]

So do you want to stat /usr/local/sbin ?

[jln (very slow on Chromium), 2012/06/06 19:59:08]

This comment was more for someone modifying the code, but let's do it.

+CHROME_SANDBOX_INSTALLED_PATH="/usr/local/sbin/chrome-devel-sandbox"
+
+installsandbox() {
+  echo "(using sudo so you may be asked for your password)"
+  sudo -- cp "${CHROME_SANDBOX_BUILD_PATH}" \
+    "${CHROME_SANDBOX_INSTALLED_PATH}" &&
+  sudo -- chown root:root "${CHROME_SANDBOX_INSTALLED_PATH}" &&
+  sudo -- chmod 4755 "${CHROME_SANDBOX_INSTALLED_PATH}"
+  return $?
+}
+
+if [ ! -d "${CHROME_OUT_DIR}" ]; then
+  echo -n "${CHROME_OUT_DIR} does not exist. Use \"BUILDTYPE=Release ${0}\" "
+  echo "If you are building in Release mode"
+  exit 1
+fi
+
+if [ ! -f "${CHROME_SANDBOX_BUILD_PATH}" ]; then
+  echo -n "Could not find ${CHROME_SANDBOX_BUILD_PATH}, "
+  echo "please make sure you build the chrome_sandbox target"
+  exit 1
+fi
+
+if [ ! -f "${CHROME_SANDBOX_INSTALLED_PATH}" ]; then
+  echo -n "Could not find ${CHROME_SANDBOX_INSTALLED_PATH}, "
+  echo "installing it now."
+  installsandbox
+fi
+
+if [ ! -f "${CHROME_SANDBOX_INSTALLED_PATH}" ]; then
+  echo "Failed to install ${CHROME_SANDBOX_INSTALLED_PATH}"
+  exit 1
+fi
+
+CURRENT_API=$("${CHROME_SANDBOX_BUILD_PATH}" --get-api)
+INSTALLED_API=$("${CHROME_SANDBOX_INSTALLED_PATH}" --get-api)
+
+if [ "${CURRENT_API}" -ne "${INSTALLED_API}" ]; then

[Lei Zhang, 2012/06/06 07:39:33]

nit: Unlike $?, these variables are not guaranteed to be numbers. So shouldn't
this be != instead?

[jln (very slow on Chromium), 2012/06/06 19:59:08]

Done.

+  echo "Your installed setuid sandbox is too old, installing it now."
+  if ! installsandbox; then
+    echo "Failed to install ${CHROME_SANDBOX_INSTALLED_PATH}"
+    exit 1
+  fi
+else
+  echo "Your setuid sandbox is up to date"
+  if [ "${CHROME_DEVEL_SANDBOX}" != "${CHROME_SANDBOX_INSTALLED_PATH}" ]; then
+    echo -n "Make sure you have \"export "
+    echo -n "CHROME_DEVEL_SANDBOX=${CHROME_SANDBOX_INSTALLED_PATH}\" "
+    echo "somewhere in your .bashrc"
+    echo "This variable is currently: ${CHROME_DEVEL_SANDBOX:-empty}"
+  fi
+fi