OLD | NEW |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "components/nacl/loader/nacl_main_platform_delegate.h" | 5 #include "components/nacl/loader/nacl_main_platform_delegate.h" |
6 | 6 |
7 NaClMainPlatformDelegate::NaClMainPlatformDelegate( | 7 NaClMainPlatformDelegate::NaClMainPlatformDelegate( |
8 const content::MainFunctionParams& parameters) | 8 const content::MainFunctionParams& parameters) { |
9 : parameters_(parameters) { | |
10 } | 9 } |
11 | 10 |
12 NaClMainPlatformDelegate::~NaClMainPlatformDelegate() { | 11 NaClMainPlatformDelegate::~NaClMainPlatformDelegate() { |
13 } | 12 } |
14 | 13 |
15 void NaClMainPlatformDelegate::EnableSandbox() { | 14 void NaClMainPlatformDelegate::EnableSandbox() { |
16 // The setuid sandbox is started in the zygote process: zygote_main_linux.cc | 15 // The setuid sandbox is started in the zygote process: zygote_main_linux.cc |
17 // http://code.google.com/p/chromium/wiki/LinuxSUIDSandbox | 16 // http://code.google.com/p/chromium/wiki/LinuxSUIDSandbox |
18 // | 17 // |
19 // The seccomp sandbox is started in the renderer. | 18 // The seccomp sandbox is started in the renderer. |
20 // http://code.google.com/p/seccompsandbox/ | 19 // http://code.google.com/p/seccompsandbox/ |
21 // seccomp is currently disabled for nacl. | 20 // seccomp is currently disabled for nacl. |
22 // http://code.google.com/p/chromium/issues/detail?id=59423 | 21 // http://code.google.com/p/chromium/issues/detail?id=59423 |
23 // See the code in chrome/renderer/renderer_main_platform_delegate_linux.cc | 22 // See the code in chrome/renderer/renderer_main_platform_delegate_linux.cc |
24 // for how to turn seccomp on. | 23 // for how to turn seccomp on. |
25 // | 24 // |
26 // The seccomp sandbox should not be enabled for Native Client until | 25 // The seccomp sandbox should not be enabled for Native Client until |
27 // all of these issues are fixed: | 26 // all of these issues are fixed: |
28 // http://code.google.com/p/nativeclient/issues/list?q=label:Seccomp | 27 // http://code.google.com/p/nativeclient/issues/list?q=label:Seccomp |
29 // At best, NaCl will not work. At worst, enabling the seccomp sandbox | 28 // At best, NaCl will not work. At worst, enabling the seccomp sandbox |
30 // could create a hole in the NaCl sandbox. | 29 // could create a hole in the NaCl sandbox. |
31 } | 30 } |
OLD | NEW |