OLD | NEW |
---|---|
(Empty) | |
1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef CONTENT_PUBLIC_COMMON_SANDBOX_PROCESS_TYPE_MAC_H_ | |
6 #define CONTENT_PUBLIC_COMMON_SANDBOX_PROCESS_TYPE_MAC_H_ | |
7 #pragma once | |
8 | |
9 namespace content { | |
10 | |
11 // Defines the Mac sandbox types known within content. Embedders can add | |
12 // additional sandbox types with IDs starting with | |
13 // SANDBOX_PROCESS_TYPE_AFTER_LAST_TYPE. | |
14 | |
15 enum SandboxProcessType { | |
16 SANDBOX_PROCESS_TYPE_FIRST_TYPE = 0, // Placeholder to ease iteration. | |
jeremy
2011/11/24 12:20:19
I'd remove the word PROCESS from all these defines
jochen (gone - plz use gerrit)
2011/11/24 16:23:22
Done.
| |
17 | |
18 SANDBOX_PROCESS_TYPE_RENDERER = SANDBOX_PROCESS_TYPE_FIRST_TYPE, | |
19 | |
20 // The worker process uses the most restrictive sandbox which has almost | |
21 // *everything* locked down. Only a couple of /System/Library/ paths and | |
22 // some other very basic operations (e.g., reading metadata to allow | |
23 // following symlinks) are permitted. | |
24 SANDBOX_PROCESS_TYPE_WORKER, | |
25 | |
26 // Utility process is as restrictive as the worker process except full | |
27 // access is allowed to one configurable directory. | |
28 SANDBOX_PROCESS_TYPE_UTILITY, | |
29 | |
30 // GPU process. | |
31 SANDBOX_PROCESS_TYPE_GPU, | |
32 | |
33 // The PPAPI plugin process. | |
34 SANDBOX_PROCESS_TYPE_PPAPI, | |
35 | |
36 SANDBOX_PROCESS_TYPE_AFTER_LAST_TYPE, // Placeholder to ease iteration. | |
37 }; | |
38 | |
39 } // namespace content | |
40 | |
41 #endif // CONTENT_PUBLIC_COMMON_SANDBOX_PROCESS_TYPE_MAC_H_ | |
OLD | NEW |