2017-12-07 22:44:24 +01:00
|
|
|
diff --git services/service_manager/sandbox/win/sandbox_win.cc services/service_manager/sandbox/win/sandbox_win.cc
|
|
|
|
|
index b66f6b27b4e4..56f69739320a 100644
|
|
|
|
|
--- services/service_manager/sandbox/win/sandbox_win.cc
|
|
|
|
|
+++ services/service_manager/sandbox/win/sandbox_win.cc
|
|
|
|
|
@@ -757,8 +757,11 @@ sandbox::ResultCode SandboxWin::StartSandboxedProcess(
|
2017-09-29 11:17:31 +02:00
|
|
|
#endif
|
|
|
|
|
|
|
|
|
|
// Post-startup mitigations.
|
|
|
|
|
- mitigations = sandbox::MITIGATION_STRICT_HANDLE_CHECKS |
|
|
|
|
|
- sandbox::MITIGATION_DLL_SEARCH_ORDER;
|
|
|
|
|
+ mitigations = sandbox::MITIGATION_DLL_SEARCH_ORDER;
|
2017-12-07 22:44:24 +01:00
|
|
|
+ if (!launcher_process_command_line.HasSwitch("win-rt-app")) {
|
2017-09-29 11:17:31 +02:00
|
|
|
+ // Don't enable this mitigation in WinRT apps. See issue #2274.
|
|
|
|
|
+ mitigations |= sandbox::MITIGATION_STRICT_HANDLE_CHECKS;
|
|
|
|
|
+ }
|
2017-12-07 22:44:24 +01:00
|
|
|
if (base::FeatureList::IsEnabled(
|
|
|
|
|
service_manager::features::kWinSboxForceMsSigned) &&
|
|
|
|
|
!cmd_line->HasSwitch(switches::kAllowThirdPartyModules)) {
|
