OLD | NEW |
---|---|
(Empty) | |
1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef CONTENT_PUBLIC_COMMON_SANDBOX_PROCESS_TYPE_MAC_H_ | |
6 #define CONTENT_PUBLIC_COMMON_SANDBOX_PROCESS_TYPE_MAC_H_ | |
7 #pragma once | |
8 | |
9 namespace content { | |
10 | |
11 // Defines the Mac sandbox types known within content. Embedders can add | |
12 // additional sandbox types with IDs starting with SANDBOX_TYPE_AFTER_LAST_TYPE. | |
13 | |
14 enum SandboxProcessType { | |
15 SANDBOX_TYPE_FIRST_TYPE = 0, // Placeholder to ease iteration. | |
jam
2011/11/23 20:29:17
nit: content API (like WebKit API) has a conventio
jochen (gone - plz use gerrit)
2011/11/23 21:51:00
I picked SANDBOX_PROCESS_TYPE...
| |
16 | |
17 SANDBOX_TYPE_RENDERER = SANDBOX_TYPE_FIRST_TYPE, | |
18 | |
19 // The worker process uses the most restrictive sandbox which has almost | |
20 // *everything* locked down. Only a couple of /System/Library/ paths and | |
21 // some other very basic operations (e.g., reading metadata to allow | |
22 // following symlinks) are permitted. | |
23 SANDBOX_TYPE_WORKER, | |
24 | |
25 // Utility process is as restrictive as the worker process except full | |
26 // access is allowed to one configurable directory. | |
27 SANDBOX_TYPE_UTILITY, | |
28 | |
29 // GPU process. | |
30 SANDBOX_TYPE_GPU, | |
31 | |
32 // The PPAPI plugin process. | |
33 SANDBOX_TYPE_PPAPI, | |
34 | |
35 SANDBOX_TYPE_AFTER_LAST_TYPE, // Placeholder to ease iteration. | |
36 }; | |
37 | |
38 } // namespace content | |
39 | |
40 #endif // CONTENT_PUBLIC_COMMON_SANDBOX_PROCESS_TYPE_MAC_H_ | |
OLD | NEW |