Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(118)

Issues Search
    My Issues | Starred     Open | Closed | All

Issue 1029283003: WIP: Implement seccomp-bpf sandbox for nacl_helper_nonsfi.

Created:
5 years, 9 months ago by hidehiko
Modified:
5 years, 9 months ago
Reviewers:
CC:
chromium-reviews, darin-cc_chromium.org, jam, rickyz+watch_chromium.org, jln+watch_chromium.org
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

WIP: Implement seccomp-bpf sandbox for nacl_helper_nonsfi. BUG=

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+322 lines, -100 lines) Patch
M components/nacl/loader/nacl_helper_linux.cc View 1 chunk +0 lines, -4 lines 0 comments Download
M components/nacl/loader/nonsfi/nonsfi_sandbox.cc View 3 chunks +17 lines, -3 lines 0 comments Download
M components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc View 8 chunks +12 lines, -18 lines 0 comments Download
M components/nacl_nonsfi.gyp View 1 chunk +1 line, -0 lines 0 comments Download
M content/common/sandbox_linux/sandbox_init_linux.cc View 1 chunk +2 lines, -0 lines 0 comments Download
M content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc View 10 chunks +11 lines, -1 line 0 comments Download
M content/content_nacl_nonsfi.gyp View 1 chunk +6 lines, -0 lines 0 comments Download
M content/public/common/sandbox_init.h View 1 chunk +1 line, -1 line 0 comments Download
M sandbox/linux/bpf_dsl/codegen.cc View 2 chunks +3 lines, -3 lines 0 comments Download
M sandbox/linux/bpf_dsl/codegen_unittest.cc View 2 chunks +1 line, -2 lines 0 comments Download
M sandbox/linux/bpf_dsl/dump_bpf.cc View 2 chunks +17 lines, -13 lines 0 comments Download
M sandbox/linux/bpf_dsl/linux_syscall_ranges.h View 1 chunk +6 lines, -0 lines 0 comments Download
M sandbox/linux/bpf_dsl/policy_compiler.cc View 2 chunks +2 lines, -1 line 0 comments Download
M sandbox/linux/bpf_dsl/seccomp_macros.h View 2 chunks +7 lines, -7 lines 0 comments Download
M sandbox/linux/bpf_dsl/verifier.cc View 1 chunk +1 line, -0 lines 0 comments Download
M sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc View 11 chunks +24 lines, -4 lines 0 comments Download
M sandbox/linux/seccomp-bpf/sandbox_bpf.cc View 2 chunks +1 line, -1 line 0 comments Download
M sandbox/linux/seccomp-bpf/sandbox_bpf_test_runner.cc View 1 chunk +0 lines, -1 line 0 comments Download
M sandbox/linux/seccomp-bpf/syscall.h View 1 chunk +5 lines, -1 line 0 comments Download
M sandbox/linux/seccomp-bpf/syscall.cc View 1 chunk +0 lines, -1 line 0 comments Download
M sandbox/linux/seccomp-bpf/trap.h View 2 chunks +6 lines, -2 lines 0 comments Download
M sandbox/linux/seccomp-bpf/trap.cc View 8 chunks +38 lines, -25 lines 0 comments Download
M sandbox/linux/services/syscall_wrappers.h View 2 chunks +7 lines, -0 lines 0 comments Download
M sandbox/linux/services/syscall_wrappers.cc View 2 chunks +12 lines, -0 lines 0 comments Download
M sandbox/linux/system_headers/android_i386_ucontext.h View 1 chunk +8 lines, -0 lines 0 comments Download
M sandbox/linux/system_headers/android_ucontext.h View 1 chunk +1 line, -1 line 0 comments Download
A sandbox/linux/system_headers/linux_filter.h View 1 chunk +60 lines, -0 lines 0 comments Download
M sandbox/linux/system_headers/linux_seccomp.h View 2 chunks +0 lines, -9 lines 0 comments Download
A sandbox/linux/system_headers/linux_signal.h View 1 chunk +55 lines, -0 lines 0 comments Download
M sandbox/sandbox_nacl_nonsfi.gyp View 1 chunk +18 lines, -2 lines 0 comments Download

Powered by Google App Engine
This is Rietveld 408576698