#include "base/files/file_path.h"
#include "base/logging.h"
#include "base/path_service.h"
+#include "content/public/common/content_switches.h"
namespace chrome {
}
bool ProcessNeedsProfileDir(const std::string& process_type) {
- return true;
+ // SELinux prohibits accessing the data directory from isolated services. Only
+ // the browser (empty process type) should access the profile directory.
+ return process_type.empty();
}
} // namespace chrome