blob: 2668a91ab634122670158d665bf88f976b3c329e (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
|
--- services/audio/audio_sandbox_hook_linux.cc.orig 2025-06-30 07:04:30 UTC
+++ services/audio/audio_sandbox_hook_linux.cc
@@ -147,6 +147,7 @@ void AddPulseAudioFilePermissions(
}
#endif
+#if !BUILDFLAG(IS_BSD)
std::vector<BrokerFilePermission> GetAudioFilePermissions() {
std::vector<BrokerFilePermission> permissions{
BrokerFilePermission::ReadOnly("/dev/urandom"),
@@ -175,10 +176,12 @@ void LoadAudioLibraries() {
}
}
}
+#endif
} // namespace
bool AudioPreSandboxHook(sandbox::policy::SandboxLinux::Options options) {
+#if !BUILDFLAG(IS_BSD)
LoadAudioLibraries();
auto* instance = sandbox::policy::SandboxLinux::GetInstance();
instance->StartBrokerProcess(MakeBrokerCommandSet({
@@ -196,6 +199,7 @@ bool AudioPreSandboxHook(sandbox::policy::SandboxLinux
// TODO(crbug.com/40579955) enable namespace sandbox. Currently, if
// enabled, connect() on pulse native socket fails with ENOENT (called from
// pa_context_connect).
+#endif
return true;
}
|
