commit | c7b993b3e84a3d35b51f959f21b1418d3cdfed41 | [log] [tgz] |
---|---|---|
author | Tom Anderson <thomasanderson@chromium.org> | Thu Jul 26 17:15:04 2018 |
committer | Commit Bot <commit-bot@chromium.org> | Thu Jul 26 17:15:04 2018 |
tree | 7a007c2734b4483c7934a4cf93fa9eff0b73afba | |
parent | 63b093741c532a2330f09dbc02bd3e64f1f8f044 [diff] |
Reland "Stop removing rpath_for_built_shared_libraries from chrome_sandbox" This is a reland of 43a48785f23a65d5b3f0cefac086d67c3dea4eb0 After [1], the RPATH is no longer set for sanitizer builds. Also, after [2], the setuid bit is no longer set on chrome_sandbox anyway. [1] https://chromium.googlesource.com/chromium/src.git/+/f002a96e9b788fe71fd1c773a4bc891940c409d8 [2] https://chromium.googlesource.com/chromiumos/chromite.git/+/de3a6f421ec7e32c45fd4131f50d2c0a98fcdd56 Original change's description: > Stop removing rpath_for_built_shared_libraries from chrome_sandbox > > For instrumented builds like tsan, this causes chrome_sandbox to reference the > wrong libc++.so due to a missing RPATH. > > Since all configurations we ship don't set RPATH, we don't have to worry about > security vulnerabilities introduced by RPATH=$ORIGIN. There's also a check to > enforce this in chrome/installer/linux/common/installer.include. > > BUG=850682 > > Change-Id: I25307bd9de388009acffdbb8de6717210873655b > Reviewed-on: https://chromium-review.googlesource.com/1092077 > Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org> > Reviewed-by: Dirk Pranke <dpranke@chromium.org> > Commit-Queue: Thomas Anderson <thomasanderson@chromium.org> > Cr-Commit-Position: refs/heads/master@{#566099} Bug: 850682 Change-Id: I82fda0bd5b8f0222d64dcf6c4b7d1199c7e5e585 Reviewed-on: https://chromium-review.googlesource.com/1150254 Reviewed-by: Nico Weber <thakis@chromium.org> Reviewed-by: Robert Sesek <rsesek@chromium.org> Commit-Queue: Thomas Anderson <thomasanderson@chromium.org> Cr-Commit-Position: refs/heads/master@{#578346}
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .