OLD | NEW |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_ | 5 #ifndef COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_ |
6 #define COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_ | 6 #define COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_ |
7 | 7 |
8 #include "base/basictypes.h" | |
9 #include "base/files/scoped_file.h" | 8 #include "base/files/scoped_file.h" |
| 9 #include "base/macros.h" |
10 #include "sandbox/linux/bpf_dsl/bpf_dsl_forward.h" | 10 #include "sandbox/linux/bpf_dsl/bpf_dsl_forward.h" |
11 #include "sandbox/linux/bpf_dsl/policy.h" | 11 #include "sandbox/linux/bpf_dsl/policy.h" |
12 | 12 |
13 namespace nacl { | 13 namespace nacl { |
14 namespace nonsfi { | 14 namespace nonsfi { |
15 | 15 |
16 // The seccomp sandbox policy for NaCl non-SFI mode. Note that this | 16 // The seccomp sandbox policy for NaCl non-SFI mode. Note that this |
17 // policy must be as strong as possible, as non-SFI mode heavily | 17 // policy must be as strong as possible, as non-SFI mode heavily |
18 // depends on seccomp sandbox. | 18 // depends on seccomp sandbox. |
19 class NaClNonSfiBPFSandboxPolicy : public sandbox::bpf_dsl::Policy { | 19 class NaClNonSfiBPFSandboxPolicy : public sandbox::bpf_dsl::Policy { |
(...skipping 12 matching lines...) Expand all Loading... |
32 }; | 32 }; |
33 | 33 |
34 // Initializes seccomp-bpf sandbox for non-SFI NaCl. Returns false on | 34 // Initializes seccomp-bpf sandbox for non-SFI NaCl. Returns false on |
35 // failure. | 35 // failure. |
36 bool InitializeBPFSandbox(base::ScopedFD proc_fd); | 36 bool InitializeBPFSandbox(base::ScopedFD proc_fd); |
37 | 37 |
38 } // namespace nonsfi | 38 } // namespace nonsfi |
39 } // namespace nacl | 39 } // namespace nacl |
40 | 40 |
41 #endif // COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_ | 41 #endif // COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_ |
OLD | NEW |