Support running NaCl in Chromium's Linux SUID sandbox

src/shared/imc/nacl_imc_unistd.cc

 /*
  * Copyright 2008 The Native Client Authors. All rights reserved.
  * Use of this source code is governed by a BSD-style license that can
  * be found in the LICENSE file.
  */
 
 
 // NaCl inter-module communication primitives.
 //
 // This file implements common parts of IMC for "unix like systems" (i.e. not
@@ skipping 14 matching lines @@
 #include <unistd.h>
 #include <sys/mman.h>
 #include <sys/types.h>
 
 #include <algorithm>
 
 #include "native_client/src/include/atomic_ops.h"
 
 #include "native_client/src/shared/imc/nacl_imc.h"
 
+#if defined(CHROMIUM_BUILD) && NACL_LINUX
+#include "chrome/renderer/renderer_sandbox_support_linux.h"
+#endif
+
 namespace nacl {
 
 namespace {
 
 // The pathname prefix for memory objects created by CreateMemoryObject().
 const char kShmPrefix[] = "/google-nacl-shm-";
 
 }  // namespace
 
 bool WouldBlock() {
@@ skipping 34 matching lines @@
     int m = shm_open(name, O_RDWR | O_CREAT | O_EXCL, 0600);
     if (0 <= m) {
       if (ftruncate(m, length) == -1) {
         close(m);
         m = -1;
       }
       shm_unlink(name);
       return m;
     }
     if (errno != EEXIST) {
+#if defined(CHROMIUM_BUILD) && NACL_LINUX
+      return MakeSharedMemorySegmentViaIPC(length);

[gregoryd, 2010/03/04 17:37:45]

Do we know that shm_open will fail in the sandbox? If so, why do we try and not
call MakeSharedMemorySegmentViaIPC?

+#endif
       return -1;
     }
   }
 }
 
 void* Map(void* start, size_t length, int prot, int flags,
           Handle memory, off_t offset) {
   static const int kPosixProt[] = {
     PROT_NONE,
     PROT_READ,
@@ skipping 16 matching lines @@
     adjusted |= MAP_FIXED;
   }
   return mmap(start, length, kPosixProt[prot & 7], adjusted, memory, offset);
 }
 
 int Unmap(void* start, size_t length) {
   return munmap(start, length);
 }
 
 }  // namespace nacl