crosvm/gpu_display
David Riley b22b6137aa gpu: add sandboxing via minijail for virtio gpu device.
Sandboxing only works when started as chronos via concierge client.  If
started directly via crosvm as root, the jail will not have proper group
permissions to access the Wayland socket.

BUG=chromium:837073
TEST=build with --features=gpu; null_platform_test without --disable-sandbox
CQ-DEPEND=CL:1213779

Change-Id: I6331f7ae1f5b99d31ad44cf158f72337294771f0
Reviewed-on: https://chromium-review.googlesource.com/1181168
Commit-Ready: David Riley <davidriley@chromium.org>
Tested-by: David Riley <davidriley@chromium.org>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Zach Reizner <zachr@chromium.org>
2018-09-17 13:18:06 -07:00
..
examples gpu_display: provides wayland based output for virtio-gpu 2018-07-09 15:48:21 -07:00
protocol gpu_display: provides wayland based output for virtio-gpu 2018-07-09 15:48:21 -07:00
src gpu: add sandboxing via minijail for virtio gpu device. 2018-09-17 13:18:06 -07:00
build.rs gpu_display: provides wayland based output for virtio-gpu 2018-07-09 15:48:21 -07:00
Cargo.toml gpu_display: provides wayland based output for virtio-gpu 2018-07-09 15:48:21 -07:00