f6f68ece44
WebContent no longer creates a GPU-backed Skia context, so its Linux sandbox does not need the broad GPU device syscall allowance. Remove allow_gpu_device_operations() from the renderer policy while keeping the narrower file descriptor ioctl allowances used by IPC transport setup. |
||
|---|---|---|
| .. | ||
| Compositor | ||
| ImageDecoder | ||
| RequestServer | ||
| WebContent | ||
| WebDriver | ||
| WebWorker | ||
| CMakeLists.txt | ||
| RendererSandbox.h | ||
| RendererSandboxLinux.cpp | ||
| RendererSandboxMacOS.cpp | ||
| RendererSandboxUnimplemented.cpp | ||