Disable seccomp-legacy if --no-sandbox is passed.

content/common/sandbox_linux.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <fcntl.h>
 #include <sys/stat.h>
 #include <sys/types.h>
 
 #include "base/command_line.h"
 #include "base/eintr_wrapper.h"
@@ skipping 19 matching lines @@
       process_type + ".";
 #if defined(OS_CHROMEOS)
   LOG(WARNING) << activated_sandbox;
 #else
   VLOG(1) << activated_sandbox;
 #endif
 }
 
 // Implement the command line enabling logic for seccomp-legacy.
 bool IsSeccompLegacyDesired() {
+  CommandLine* command_line = CommandLine::ForCurrentProcess();
+  if (command_line->HasSwitch(switches::kNoSandbox)) {
+    return false;
+  }
 #if defined(SECCOMP_SANDBOX)
 #if defined(NDEBUG)
   // Off by default. Allow turning on with a switch.
-  return CommandLine::ForCurrentProcess()->HasSwitch(
-      switches::kEnableSeccompSandbox);
+  return command_line->HasSwitch(switches::kEnableSeccompSandbox);
 #else
   // On by default. Allow turning off with a switch.
-  return !CommandLine::ForCurrentProcess()->HasSwitch(
-      switches::kDisableSeccompSandbox);
+  return !command_line->HasSwitch(switches::kDisableSeccompSandbox);
 #endif  // NDEBUG
 #endif  // SECCOMP_SANDBOX
   return false;
 }
 
 // Our "policy" on whether or not to enable seccomp-legacy. Only renderers are
 // supported.
 bool ShouldEnableSeccompLegacy(const std::string& process_type) {
   if (IsSeccompLegacyDesired() &&
       process_type == switches::kRendererProcess) {
@@ skipping 167 matching lines @@
   return seccomp_legacy_supported_;
 }
 
 bool LinuxSandbox::seccomp_bpf_supported() const {
   CHECK(pre_initialized_);
   return seccomp_bpf_supported_;
 }
 
 }  // namespace content