[Linux] Use PR_SET_NO_NEW_PRIVS by default in base/process/launch.h.

apps/load_and_launch_browsertest.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Tests for the --load-and-launch-app switch.
 // The two cases are when chrome is running and another process uses the switch
 // and when chrome is started from scratch.
 
 #include "apps/switches.h"
 #include "base/process/launch.h"
@@ skipping 32 matching lines @@
   new_cmdline.CopySwitchesFrom(cmdline, kSwitchNames, arraysize(kSwitchNames));
 
   base::FilePath app_path = test_data_dir_
       .AppendASCII("platform_apps")
       .AppendASCII("minimal");
 
   new_cmdline.AppendSwitchNative(apps::kLoadAndLaunchApp,
                                  app_path.value());
 
   new_cmdline.AppendSwitch(content::kLaunchAsBrowser);
+  base::LaunchOptions options;
+#if defined(OS_LINUX)
+  // To prevent accidental privilege sharing to an untrusted child, processes
+  // are started with PR_SET_NO_NEW_PRIVS. Do not set that here, since this
+  // new child will be a test browser process.
+  options.allow_new_privs = true;
+#endif
   base::ProcessHandle process;
-  base::LaunchProcess(new_cmdline, base::LaunchOptions(), &process);
+  base::LaunchProcess(new_cmdline, options, &process);
   ASSERT_NE(base::kNullProcessHandle, process);
 
   ASSERT_TRUE(launched_listener.WaitUntilSatisfied());
   ASSERT_TRUE(base::WaitForSingleProcess(
       process, TestTimeouts::action_timeout()));
 }
 
 // TODO(jackhou): Enable this test once it works on OSX. It currently does not
 // work for the same reason --app-id doesn't. See http://crbug.com/148465
 #if defined(OS_MACOSX)
@@ skipping 21 matching lines @@
   base::FilePath test_file_path = test_data_dir_
       .AppendASCII("platform_apps")
       .AppendASCII("launch_files")
       .AppendASCII("test.txt");
 
   new_cmdline.AppendSwitchNative(apps::kLoadAndLaunchApp,
                                  app_path.value());
   new_cmdline.AppendSwitch(content::kLaunchAsBrowser);
   new_cmdline.AppendArgPath(test_file_path);
 
+  base::LaunchOptions options;
+#if defined(OS_LINUX)
+  // To prevent accidental privilege sharing to an untrusted child, processes
+  // are started with PR_SET_NO_NEW_PRIVS. Do not set that here, since this
+  // new child will be a test browser process.
+  options.allow_new_privs = true;
+#endif
   base::ProcessHandle process;
-  base::LaunchProcess(new_cmdline, base::LaunchOptions(), &process);
+  base::LaunchProcess(new_cmdline, options, &process);
   ASSERT_NE(base::kNullProcessHandle, process);
 
   ASSERT_TRUE(launched_listener.WaitUntilSatisfied());
   ASSERT_TRUE(base::WaitForSingleProcess(
       process, TestTimeouts::action_timeout()));
 }
 
 namespace {
 
 // TestFixture that appends --load-and-launch-app before calling BrowserMain.
@@ skipping 38 matching lines @@
         LoadAndLaunchAppChromeNotRunning
 #endif
 
 // Case where Chrome is not running.
 IN_PROC_BROWSER_TEST_F(PlatformAppLoadAndLaunchBrowserTest,
                        MAYBE_LoadAndLaunchAppChromeNotRunning) {
   LoadAndLaunchApp();
 }
 
 }  // namespace apps