| OLD | NEW |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "components/nacl/loader/nacl_main_platform_delegate.h" | 5 #include "components/nacl/loader/nacl_main_platform_delegate.h" |
| 6 | 6 |
| 7 NaClMainPlatformDelegate::NaClMainPlatformDelegate( | 7 void NaClMainPlatformDelegate::EnableSandbox( |
| 8 const content::MainFunctionParams& parameters) | 8 const content::MainFunctionParams& parameters) { |
| 9 : parameters_(parameters) { | |
| 10 } | |
| 11 | |
| 12 NaClMainPlatformDelegate::~NaClMainPlatformDelegate() { | |
| 13 } | |
| 14 | |
| 15 void NaClMainPlatformDelegate::EnableSandbox() { | |
| 16 // The setuid sandbox is started in the zygote process: zygote_main_linux.cc | 9 // The setuid sandbox is started in the zygote process: zygote_main_linux.cc |
| 17 // http://code.google.com/p/chromium/wiki/LinuxSUIDSandbox | 10 // http://code.google.com/p/chromium/wiki/LinuxSUIDSandbox |
| 18 // | 11 // |
| 19 // The seccomp sandbox is started in the renderer. | 12 // The seccomp sandbox is started in the renderer. |
| 20 // http://code.google.com/p/seccompsandbox/ | 13 // http://code.google.com/p/seccompsandbox/ |
| 21 // seccomp is currently disabled for nacl. | 14 // seccomp is currently disabled for nacl. |
| 22 // http://code.google.com/p/chromium/issues/detail?id=59423 | 15 // http://code.google.com/p/chromium/issues/detail?id=59423 |
| 23 // See the code in chrome/renderer/renderer_main_platform_delegate_linux.cc | 16 // See the code in chrome/renderer/renderer_main_platform_delegate_linux.cc |
| 24 // for how to turn seccomp on. | 17 // for how to turn seccomp on. |
| 25 // | 18 // |
| 26 // The seccomp sandbox should not be enabled for Native Client until | 19 // The seccomp sandbox should not be enabled for Native Client until |
| 27 // all of these issues are fixed: | 20 // all of these issues are fixed: |
| 28 // http://code.google.com/p/nativeclient/issues/list?q=label:Seccomp | 21 // http://code.google.com/p/nativeclient/issues/list?q=label:Seccomp |
| 29 // At best, NaCl will not work. At worst, enabling the seccomp sandbox | 22 // At best, NaCl will not work. At worst, enabling the seccomp sandbox |
| 30 // could create a hole in the NaCl sandbox. | 23 // could create a hole in the NaCl sandbox. |
| 31 } | 24 } |
| OLD | NEW |