Demo: Build NamespaceSandbox::ForkInNewPidNamespace.

base/process/launch_posix.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/process/launch.h"
 
 #include <dirent.h>
 #include <errno.h>
 #include <fcntl.h>
 #include <sched.h>
@@ skipping 49 matching lines @@
 #include <crt_externs.h>
 #include <sys/event.h>
 #else
 extern char** environ;
 #endif
 
 namespace base {
 
 namespace {
 
+#if !defined(OS_NACL_NONSFI)
 // Get the process's "environment" (i.e. the thing that setenv/getenv
 // work with).
 char** GetEnvironment() {
 #if defined(OS_MACOSX)
   return *_NSGetEnviron();
 #else
   return environ;
 #endif
 }
 
@@ skipping 102 matching lines @@
     // Now ask the kernel again and check that no restorer will leak.
     if (sys_rt_sigaction(signum, NULL, &act) || act.k_sa_restorer) {
       RAW_LOG(FATAL, "Cound not fix sa_restorer.");
     }
 #endif  // !defined(NDEBUG)
   }
 }
 #endif  // !defined(OS_LINUX) ||
         // (!defined(__i386__) && !defined(__x86_64__) && !defined(__arm__))
 
-#if defined(OS_LINUX)
+#endif  // !defined(OS_NACL_NONSFI)
+
+#if defined(OS_LINUX) || defined(OS_NACL_NONSFI)
 bool IsRunningOnValgrind() {
   return RUNNING_ON_VALGRIND;
 }
 
 // This function runs on the stack specified on the clone call. It uses longjmp
 // to switch back to the original stack so the child can return from sys_clone.
 int CloneHelper(void* arg) {
   jmp_buf* env_ptr = reinterpret_cast<jmp_buf*>(arg);
   longjmp(*env_ptr, 1);
 
@@ skipping 25 matching lines @@
   char stack_buf[PTHREAD_STACK_MIN];
 #if defined(ARCH_CPU_X86_FAMILY) || defined(ARCH_CPU_ARM_FAMILY) || \
     defined(ARCH_CPU_MIPS64_FAMILY) || defined(ARCH_CPU_MIPS_FAMILY)
   // The stack grows downward.
   void* stack = stack_buf + sizeof(stack_buf);
 #else
 #error "Unsupported architecture"
 #endif
   return clone(&CloneHelper, stack, flags, env, ptid, nullptr, ctid);
 }
-#endif  // defined(OS_LINUX)
+#endif  // defined(OS_LINUX) || defined(OS_NACL_NONSFI)
 
 }  // anonymous namespace
 
+#if !defined(OS_NACL_NONSFI)
 // Functor for |ScopedDIR| (below).
 struct ScopedDIRClose {
   inline void operator()(DIR* x) const {
     if (x)
       closedir(x);
   }
 };
 
 // Automatically closes |DIR*|s.
 typedef scoped_ptr<DIR, ScopedDIRClose> ScopedDIR;
@@ skipping 482 matching lines @@
 bool GetAppOutputWithExitCode(const CommandLine& cl,
                               std::string* output,
                               int* exit_code) {
   // Run |execve()| with the current environment and store "unlimited" data.
   GetAppOutputInternalResult result = GetAppOutputInternal(
       cl.argv(), NULL, output, std::numeric_limits<std::size_t>::max(), true,
       exit_code);
   return result == EXECUTE_SUCCESS;
 }
 
-#if defined(OS_LINUX)
+#endif  // !defined(OS_NACL_NONSFI)
+
+#if defined(OS_LINUX) || defined(OS_NACL_NONSFI)
 pid_t ForkWithFlags(unsigned long flags, pid_t* ptid, pid_t* ctid) {
   const bool clone_tls_used = flags & CLONE_SETTLS;
   const bool invalid_ctid =
       (flags & (CLONE_CHILD_SETTID | CLONE_CHILD_CLEARTID)) && !ctid;
   const bool invalid_ptid = (flags & CLONE_PARENT_SETTID) && !ptid;
 
   // We do not support CLONE_VM.
   const bool clone_vm_used = flags & CLONE_VM;
 
   if (clone_tls_used || invalid_ctid || invalid_ptid || clone_vm_used) {
@@ skipping 18 matching lines @@
 #endif
   }
 
   jmp_buf env;
   if (setjmp(env) == 0) {
     return CloneAndLongjmpInChild(flags, ptid, ctid, &env);
   }
 
   return 0;
 }
-#endif  // defined(OS_LINUX)
+#endif  // defined(OS_LINUX) || defined(OS_NACL_NONSFI)
 
 }  // namespace base