features.gni 891 B

123456789101112131415161718
  1. # Copyright 2016 The Chromium Authors. All rights reserved.
  2. # Use of this source code is governed by a BSD-style license that can be
  3. # found in the LICENSE file.
  4. # The seccomp-bpf sandbox is only supported on six architectures
  5. # currently.
  6. # Do not disable seccomp_bpf anywhere without talking to
  7. # security@chromium.org!
  8. use_seccomp_bpf = (is_linux || is_chromeos || is_android) &&
  9. (current_cpu == "x86" || current_cpu == "x64" ||
  10. current_cpu == "arm" || current_cpu == "arm64" ||
  11. current_cpu == "mipsel" || current_cpu == "mips64el" ||
  12. current_cpu == "riscv64")
  13. # SSBD (Speculative Store Bypass Disable) is a mitigation of Spectre Variant 4.
  14. # As Spectre Variant 4 can be mitigated by site isolation, opt-out SSBD on site
  15. # isolation fully applied platform.
  16. disable_seccomp_ssbd = use_seccomp_bpf && !is_android