ccf70326c0
Co-authored-by: John Kleinschmidt <jkleinsc@github.com> Co-authored-by: Shelley Vohr <shelley.vohr@gmail.com> Co-authored-by: Samuel Attard <samuel.r.attard@gmail.com> Co-authored-by: Andy Locascio <andy@slack-corp.com>
27 lines
970 B
Diff
27 lines
970 B
Diff
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
|
|
From: Anonymous <anonymous@electronjs.org>
|
|
Date: Thu, 20 Sep 2018 17:46:43 -0700
|
|
Subject: thread_capabilities.patch
|
|
|
|
Chromium automatically drops all capabilities of renderer threads in
|
|
Linux, which may cause issues in a context like Electron, where the main
|
|
and renderer threads are supposed to keep inherited permissions over the
|
|
system.
|
|
|
|
See https://github.com/atom/electron/issues/3666
|
|
|
|
diff --git a/sandbox/linux/services/credentials.cc b/sandbox/linux/services/credentials.cc
|
|
index d7b5d8c441354965ee0cb87a57d9552a4ae1f20d..dd145dd38fdbd7c426bd821baff0d9fe76201469 100644
|
|
--- a/sandbox/linux/services/credentials.cc
|
|
+++ b/sandbox/linux/services/credentials.cc
|
|
@@ -354,8 +354,10 @@ pid_t Credentials::ForkAndDropCapabilitiesInChild() {
|
|
return pid;
|
|
}
|
|
|
|
+#if 0
|
|
// Since we just forked, we are single threaded.
|
|
PCHECK(DropAllCapabilitiesOnCurrentThread());
|
|
+#endif
|
|
return 0;
|
|
}
|
|
|