| OLD | NEW |
| 1 // Copyright (c) 2009 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2009 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 // http://code.google.com/p/chromium/wiki/LinuxSUIDSandbox | 5 // http://code.google.com/p/chromium/wiki/LinuxSUIDSandbox |
| 6 | 6 |
| 7 #include <asm/unistd.h> | 7 #include <asm/unistd.h> |
| 8 #include <errno.h> | 8 #include <errno.h> |
| 9 #include <fcntl.h> | 9 #include <fcntl.h> |
| 10 #include <sched.h> | 10 #include <sched.h> |
| 11 #include <signal.h> | 11 #include <signal.h> |
| 12 #include <stdarg.h> | 12 #include <stdarg.h> |
| 13 #include <stdio.h> | 13 #include <stdio.h> |
| 14 #include <stdlib.h> | 14 #include <stdlib.h> |
| 15 #include <string.h> | 15 #include <string.h> |
| 16 #include <sys/prctl.h> | 16 #include <sys/prctl.h> |
| 17 #include <sys/resource.h> | 17 #include <sys/resource.h> |
| 18 #include <sys/socket.h> | 18 #include <sys/socket.h> |
| 19 #include <sys/stat.h> | 19 #include <sys/stat.h> |
| 20 #include <sys/time.h> | 20 #include <sys/time.h> |
| 21 #include <sys/types.h> | 21 #include <sys/types.h> |
| 22 #include <unistd.h> | 22 #include <unistd.h> |
| 23 | 23 |
| 24 #if !defined(CLONE_NEWPID) | 24 #if !defined(CLONE_NEWPID) |
| 25 #define CLONE_NEWPID 0x20000000 | 25 #define CLONE_NEWPID 0x20000000 |
| 26 #endif | 26 #endif |
| 27 | 27 |
| 28 static const char kChromeBinary[] = "/opt/google/chrome/chrome"; | 28 #if !defined(LINUX_SANDBOX_CHROME_PATH) && \ |
| 29 !defined(CHROME_DEVEL_SANDBOX) |
| 30 #error LINUX_SANDBOX_CHROME_PATH must be defined to be the location of the \ |
| 31 Chrome binary, or CHROME_DEVEL_SANDBOX must be defined |
| 32 #endif |
| 33 |
| 34 #if defined(LINUX_SANDBOX_CHROME_PATH) |
| 35 static const char kChromeBinary[] = LINUX_SANDBOX_CHROME_PATH; |
| 36 #endif |
| 37 |
| 29 static const char kSandboxDescriptorEnvironmentVarName[] = "SBX_D"; | 38 static const char kSandboxDescriptorEnvironmentVarName[] = "SBX_D"; |
| 30 | 39 |
| 31 // These are the magic byte values which the sandboxed process uses to request | 40 // These are the magic byte values which the sandboxed process uses to request |
| 32 // that it be chrooted. | 41 // that it be chrooted. |
| 33 static const char kMsgChrootMe = 'C'; | 42 static const char kMsgChrootMe = 'C'; |
| 34 static const char kMsgChrootSuccessful = 'O'; | 43 static const char kMsgChrootSuccessful = 'O'; |
| 35 | 44 |
| 36 static void FatalError(const char *msg, ...) | 45 static void FatalError(const char *msg, ...) |
| 37 __attribute__((noreturn, format(printf,1,2))); | 46 __attribute__((noreturn, format(printf,1,2))); |
| 38 | 47 |
| (...skipping 258 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 297 if (!DropRoot()) | 306 if (!DropRoot()) |
| 298 return 1; | 307 return 1; |
| 299 if (!SetupChildEnvironment()) | 308 if (!SetupChildEnvironment()) |
| 300 return 1; | 309 return 1; |
| 301 | 310 |
| 302 execv(argv[1], &argv[1]); | 311 execv(argv[1], &argv[1]); |
| 303 FatalError("execv failed"); | 312 FatalError("execv failed"); |
| 304 | 313 |
| 305 return 1; | 314 return 1; |
| 306 } | 315 } |
| OLD | NEW |