From da77132fcf6627bec8f3909890b259f8bfec7cdc Mon Sep 17 00:00:00 2001
From: Fergal Daly <fergal@chromium.org>
Date: Mon, 27 Jul 2026 04:01:27 -0700
Subject: [PATCH] Enable kFileSystemAccessRenameRequiresParentWritePermission by default.

Also set kOnlyInHomedir to false. This is the most secure but also
most likely to be disruptive.

Bug: 498839176
Change-Id: Icd30b4a85c9b2a0e154b34c76ab2b19fe78fcb49
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8138342
Commit-Queue: Rakina Zata Amni <rakina@chromium.org>
Auto-Submit: Fergal Daly <fergal@chromium.org>
Reviewed-by: Rakina Zata Amni <rakina@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1668484}
---

diff --git a/content/browser/file_system_access/features.cc b/content/browser/file_system_access/features.cc
index 2cc9e3c..1aab61d4 100644
--- a/content/browser/file_system_access/features.cc
+++ b/content/browser/file_system_access/features.cc
@@ -71,12 +71,12 @@
 // When enabled, rename in the local file system requires write permission to
 // its parent directory.
 BASE_FEATURE(kFileSystemAccessRenameRequiresParentWritePermission,
-             base::FEATURE_DISABLED_BY_DEFAULT);
+             base::FEATURE_ENABLED_BY_DEFAULT);
 
 // Controls whether the rename permission check is restricted to the home
 // directory.
 BASE_FEATURE_PARAM(bool,
                    kOnlyInHomedir,
                    &kFileSystemAccessRenameRequiresParentWritePermission,
-                   true);
+                   false);
 }  // namespace content::features