Linux GPU sandbox: only allocate broker policy in the broker.
commit3788a74e495d05b87548d9bd4dbb667531f17495
authorjln@chromium.org <jln@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>
Tue, 29 Apr 2014 01:15:08 +0000 (29 01:15 +0000)
committerjln@chromium.org <jln@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>
Tue, 29 Apr 2014 01:15:08 +0000 (29 01:15 +0000)
tree406845e3cdbb2d62033bd6da47b3726d5110caff
parent52c43cbfb9b8195da2146025d2e57d8ab4d99adb
Linux GPU sandbox: only allocate broker policy in the broker.

The GPU broker policy was allocated in the main GPU process and then used in
the broker process. We switch the logic so that the broker policy is only ever
allocated in the broker process itself.

Besides fixing a small memory leak (in the GPU process), this makes sure that a
policy is only ever used in the process that allocated it. This will allow to
bind policies with properties such as "which processes does this policy allow
to send signal to".

BUG=367986
R=jorgelo@chromium.org

Review URL: https://codereview.chromium.org/251183004

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@266726 0039d316-1c4b-4281-b951-d872f2087c98
content/common/sandbox_linux/bpf_cros_arm_gpu_policy_linux.cc
content/common/sandbox_linux/bpf_gpu_policy_linux.cc
content/common/sandbox_linux/bpf_gpu_policy_linux.h