Add env var for GPU process sandbox.

content/gpu/gpu_main.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <stdlib.h>
 
 #if defined(OS_WIN)
 #include <windows.h>
 #endif
 
@@ skipping 78 matching lines @@
   success = base::HexStringToInt(
       command_line.GetSwitchValueASCII(switches::kGpuDeviceID),
       reinterpret_cast<int*>(&(gpu_info.gpu.device_id)));
   DCHECK(success);
   gpu_info.driver_vendor =
       command_line.GetSwitchValueASCII(switches::kGpuDriverVendor);
   gpu_info.driver_version =
       command_line.GetSwitchValueASCII(switches::kGpuDriverVersion);
   content::GetContentClient()->SetGpuInfo(gpu_info);
 
+#if defined(OS_CHROMEOS)
+  // On Chrome OS, we can now sandbox the GPU process using seccomp filter.
+  // This restricts calls to open(), so set the config line in /etc/drirc as
+  // an environment variable.
+  base::Environment::Create()->SetVar("force_s3tc_enable", "true");

[piman, 2012/07/10 23:53:05]

Sigh... that file may be used to do per-platform configuration. Is it going to
leak all over the place here instead of in Chrome OS per-board overlay?

Can't we change the driver to make sure that it reads that file early (before we
turn on the sandbox) instead?

+#endif
+
   // Load and initialize the GL implementation and locate the GL entry points.
   if (gfx::GLSurface::InitializeOneOff()) {
 #if defined(OS_LINUX)
     // We collect full GPU info on demand in Win/Mac, i.e., when about:gpu
     // page opens.  This is because we can make blacklist decisions based on
     // preliminary GPU info.
     // However, on Linux, we may not have enough info for blacklisting.
     if (!gpu_info.gpu.vendor_id || !gpu_info.gpu.device_id ||
         gpu_info.driver_vendor.empty() || gpu_info.driver_version.empty()) {
       if (!gpu_info_collector::CollectGraphicsInfo(&gpu_info))
@@ skipping 110 matching lines @@
 
   {
     TRACE_EVENT0("gpu", "Run Message Loop");
     main_message_loop.Run();
   }
 
   child_thread->StopWatchdog();
 
   return 0;
 }