OLD | NEW |
1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef SANDBOX_LINUX_SECCOMP_BPF_HELPERS_BASELINE_POLICY_H_ | 5 #ifndef SANDBOX_LINUX_SECCOMP_BPF_HELPERS_BASELINE_POLICY_H_ |
6 #define SANDBOX_LINUX_SECCOMP_BPF_HELPERS_BASELINE_POLICY_H_ | 6 #define SANDBOX_LINUX_SECCOMP_BPF_HELPERS_BASELINE_POLICY_H_ |
7 | 7 |
| 8 #include "base/macros.h" |
8 #include "sandbox/linux/bpf_dsl/bpf_dsl_forward.h" | 9 #include "sandbox/linux/bpf_dsl/bpf_dsl_forward.h" |
9 #include "sandbox/linux/bpf_dsl/policy.h" | 10 #include "sandbox/linux/bpf_dsl/policy.h" |
10 #include "sandbox/sandbox_export.h" | 11 #include "sandbox/sandbox_export.h" |
11 | 12 |
12 namespace sandbox { | 13 namespace sandbox { |
13 | 14 |
14 // This is a helper to build seccomp-bpf policies, i.e. policies for a sandbox | 15 // This is a helper to build seccomp-bpf policies, i.e. policies for a sandbox |
15 // that reduces the Linux kernel's attack surface. Given its nature, it doesn't | 16 // that reduces the Linux kernel's attack surface. Given its nature, it doesn't |
16 // have a clear semantics and is mostly "implementation-defined". | 17 // have a clear semantics and is mostly "implementation-defined". |
17 // | 18 // |
(...skipping 21 matching lines...) Expand all Loading... |
39 | 40 |
40 // The PID that the policy applies to (should be equal to the current pid). | 41 // The PID that the policy applies to (should be equal to the current pid). |
41 pid_t policy_pid_; | 42 pid_t policy_pid_; |
42 | 43 |
43 DISALLOW_COPY_AND_ASSIGN(BaselinePolicy); | 44 DISALLOW_COPY_AND_ASSIGN(BaselinePolicy); |
44 }; | 45 }; |
45 | 46 |
46 } // namespace sandbox. | 47 } // namespace sandbox. |
47 | 48 |
48 #endif // SANDBOX_LINUX_SECCOMP_BPF_HELPERS_BASELINE_POLICY_H_ | 49 #endif // SANDBOX_LINUX_SECCOMP_BPF_HELPERS_BASELINE_POLICY_H_ |
OLD | NEW |