OLD | NEW |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "components/nacl/loader/nacl_main_platform_delegate.h" | 5 #include "components/nacl/loader/nacl_main_platform_delegate.h" |
6 | 6 |
7 void NaClMainPlatformDelegate::EnableSandbox( | 7 void NaClMainPlatformDelegate::EnableSandbox( |
8 const content::MainFunctionParams& parameters) { | 8 const content::MainFunctionParams& parameters) { |
9 // The setuid sandbox is started in the zygote process: zygote_main_linux.cc | 9 // The setuid sandbox is started in the zygote process: zygote_main_linux.cc |
10 // http://code.google.com/p/chromium/wiki/LinuxSUIDSandbox | 10 // https://chromium.googlesource.com/chromium/src/+/master/docs/linux_suid_san
dbox.md |
11 // | 11 // |
12 // The seccomp sandbox is started in the renderer. | 12 // The seccomp sandbox is started in the renderer. |
13 // http://code.google.com/p/seccompsandbox/ | 13 // http://code.google.com/p/seccompsandbox/ |
14 // seccomp is currently disabled for nacl. | 14 // seccomp is currently disabled for nacl. |
15 // http://code.google.com/p/chromium/issues/detail?id=59423 | 15 // http://code.google.com/p/chromium/issues/detail?id=59423 |
16 // See the code in chrome/renderer/renderer_main_platform_delegate_linux.cc | 16 // See the code in chrome/renderer/renderer_main_platform_delegate_linux.cc |
17 // for how to turn seccomp on. | 17 // for how to turn seccomp on. |
18 // | 18 // |
19 // The seccomp sandbox should not be enabled for Native Client until | 19 // The seccomp sandbox should not be enabled for Native Client until |
20 // all of these issues are fixed: | 20 // all of these issues are fixed: |
21 // http://code.google.com/p/nativeclient/issues/list?q=label:Seccomp | 21 // http://code.google.com/p/nativeclient/issues/list?q=label:Seccomp |
22 // At best, NaCl will not work. At worst, enabling the seccomp sandbox | 22 // At best, NaCl will not work. At worst, enabling the seccomp sandbox |
23 // could create a hole in the NaCl sandbox. | 23 // could create a hole in the NaCl sandbox. |
24 } | 24 } |
OLD | NEW |