GitLab

Adding ambient-executable feature flag to component sandboxes
as a preflight for restricting the use of replace_as_executable
with an invalid handle.

Bug: SEC-354
Change-Id: If23482218720e8024f054a7dafc3f4366d1db7f9
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1687945
Commit-Queue: Oliver Hunt <ojh@google.com>
Reviewed-by: Sergey Ulanov <sergeyu@chromium.org>
Reviewed-by: Yuchen Liu <yucliu@chromium.org>
Reviewed-by: Fabrice de Gans-Riberi <fdegans@chromium.org>
Cr-Commit-Position: refs/heads/master@{#675848}