tree f00a6ac5efd9aa6bbf431120c655289461d5f548
parent 166cbfabb4d277a197acb92f3d910846902717ca
author Micah Morton <mortonm@chromium.org> 1528222147 -0700
committer chrome-bot <chrome-bot@chromium.org> 1531336374 -0700

Reland "shill: start running shill process tree in a minijail"

This is a reland of aad3747780f4f81a971878773b79635e1b3dc001

The 2 known issues which caused problems the first time around have been
addressed by CL:1130017 and CL:1130474. I've done some more thorough
testing (including with elm board, which is arm processor and marvell wifi)
and haven't discovered any new issues.

CQ-DEPEND=CL:1130017,CL:1130474

Original change's description:
> shill: start running shill process tree in a minijail
>
> Kick off shill sandboxing (we'll see if it sticks). This simple change to
> the init script as well as the autotest change to
> security_SandboxedServices are the only 2 things that need to be
> reverted to go back to running the shill process tree as root.
>
> CQ-DEPEND=CL:1082958
> BUG=chromium:649417
> TEST=observed shill process tree running as non-root. no autotests
> break.
>
> Change-Id: Ice5ed2cbbc64281ba8f136e5157023ff355245d6
> Reviewed-on: https://chromium-review.googlesource.com/1087540
> Commit-Ready: Micah Morton <mortonm@chromium.org>
> Tested-by: Micah Morton <mortonm@chromium.org>
> Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>

Bug: chromium:649417
Change-Id: I3fc5506ee8886db8d6a4d7d155216aba9e20b7f8
Reviewed-on: https://chromium-review.googlesource.com/1132174
Commit-Ready: ChromeOS CL Exonerator Bot <chromiumos-cl-exonerator@appspot.gserviceaccount.com>
Tested-by: Micah Morton <mortonm@chromium.org>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>