| OLD | NEW |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef SANDBOX_LINUX_SERVICES_NAMESPACE_UTILS_H_ | 5 #ifndef SANDBOX_LINUX_SERVICES_NAMESPACE_UTILS_H_ |
| 6 #define SANDBOX_LINUX_SERVICES_NAMESPACE_UTILS_H_ | 6 #define SANDBOX_LINUX_SERVICES_NAMESPACE_UTILS_H_ |
| 7 | 7 |
| 8 #include <sys/types.h> | 8 #include <sys/types.h> |
| 9 | 9 |
| 10 #include "base/compiler_specific.h" | 10 #include "base/compiler_specific.h" |
| 11 #include "base/macros.h" | 11 #include "base/macros.h" |
| 12 #include "base/template_util.h" | 12 #include "base/template_util.h" |
| 13 #include "sandbox/sandbox_export.h" | 13 #include "sandbox/sandbox_export.h" |
| 14 | 14 |
| 15 namespace sandbox { | 15 namespace sandbox { |
| 16 | 16 |
| 17 // Utility functions for using Linux namepaces. | 17 // Utility functions for using Linux namepaces. |
| 18 class SANDBOX_EXPORT NamespaceUtils { | 18 class SANDBOX_EXPORT NamespaceUtils { |
| 19 public: | 19 public: |
| 20 COMPILE_ASSERT((base::is_same<uid_t, gid_t>::value), UidAndGidAreSameType); | 20 static_assert((base::is_same<uid_t, gid_t>::value), |
| 21 "uid_t and gid_t must be the same type"); |
| 21 // generic_id_t can be used for either uid_t or gid_t. | 22 // generic_id_t can be used for either uid_t or gid_t. |
| 22 typedef uid_t generic_id_t; | 23 typedef uid_t generic_id_t; |
| 23 | 24 |
| 24 // Write a uid or gid mapping from |id| to |id| in |map_file|. This function | 25 // Write a uid or gid mapping from |id| to |id| in |map_file|. This function |
| 25 // is async-signal-safe. | 26 // is async-signal-safe. |
| 26 static bool WriteToIdMapFile(const char* map_file, | 27 static bool WriteToIdMapFile(const char* map_file, |
| 27 generic_id_t id) WARN_UNUSED_RESULT; | 28 generic_id_t id) WARN_UNUSED_RESULT; |
| 28 | 29 |
| 29 // Returns true if unprivileged namespaces of type |type| is supported | 30 // Returns true if unprivileged namespaces of type |type| is supported |
| 30 // (meaning that both CLONE_NEWUSER and type are are supported). |type| must | 31 // (meaning that both CLONE_NEWUSER and type are are supported). |type| must |
| (...skipping 13 matching lines...) Expand all Loading... |
| 44 // KernelSupportsDenySetgroups. This function is async-signal-safe. | 45 // KernelSupportsDenySetgroups. This function is async-signal-safe. |
| 45 static bool DenySetgroups() WARN_UNUSED_RESULT; | 46 static bool DenySetgroups() WARN_UNUSED_RESULT; |
| 46 | 47 |
| 47 private: | 48 private: |
| 48 DISALLOW_IMPLICIT_CONSTRUCTORS(NamespaceUtils); | 49 DISALLOW_IMPLICIT_CONSTRUCTORS(NamespaceUtils); |
| 49 }; | 50 }; |
| 50 | 51 |
| 51 } // namespace sandbox | 52 } // namespace sandbox |
| 52 | 53 |
| 53 #endif // SANDBOX_LINUX_SERVICES_NAMESPACE_UTILS_H_ | 54 #endif // SANDBOX_LINUX_SERVICES_NAMESPACE_UTILS_H_ |
| OLD | NEW |