Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1593)

Side by Side Diff: content/common/sandbox_seccomp_bpf_linux.cc

Issue 16019017: Allow ugetrlimit() whenever we allow getrlimit() as the calls are pretty (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src/
Patch Set: Created 7 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « no previous file | no next file » | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include <asm/unistd.h> 5 #include <asm/unistd.h>
6 #include <dlfcn.h> 6 #include <dlfcn.h>
7 #include <errno.h> 7 #include <errno.h>
8 #include <fcntl.h> 8 #include <fcntl.h>
9 #include <linux/audit.h> 9 #include <linux/audit.h>
10 #include <linux/filter.h> 10 #include <linux/filter.h>
(...skipping 1539 matching lines...) Expand 10 before | Expand all | Expand 10 after
1550 return RestrictIoctl(sandbox); 1550 return RestrictIoctl(sandbox);
1551 case __NR_prctl: 1551 case __NR_prctl:
1552 return RestrictPrctl(sandbox); 1552 return RestrictPrctl(sandbox);
1553 // Allow the system calls below. 1553 // Allow the system calls below.
1554 case __NR_fdatasync: 1554 case __NR_fdatasync:
1555 case __NR_fsync: 1555 case __NR_fsync:
1556 case __NR_getpriority: 1556 case __NR_getpriority:
1557 #if defined(__i386__) || defined(__x86_64__) 1557 #if defined(__i386__) || defined(__x86_64__)
1558 case __NR_getrlimit: 1558 case __NR_getrlimit:
1559 #endif 1559 #endif
1560 #if defined(__i386__) || defined(__arm__)
1561 case __NR_ugetrlimit:
1562 #endif
1560 case __NR_mremap: // See crbug.com/149834. 1563 case __NR_mremap: // See crbug.com/149834.
1561 case __NR_pread64: 1564 case __NR_pread64:
1562 case __NR_pwrite64: 1565 case __NR_pwrite64:
1563 case __NR_sched_getaffinity: 1566 case __NR_sched_getaffinity:
1564 case __NR_sched_get_priority_max: 1567 case __NR_sched_get_priority_max:
1565 case __NR_sched_get_priority_min: 1568 case __NR_sched_get_priority_min:
1566 case __NR_sched_getparam: 1569 case __NR_sched_getparam:
1567 case __NR_sched_getscheduler: 1570 case __NR_sched_getscheduler:
1568 case __NR_sched_setscheduler: 1571 case __NR_sched_setscheduler:
1569 case __NR_setpriority: 1572 case __NR_setpriority:
(...skipping 299 matching lines...) Expand 10 before | Expand all | Expand 10 after
1869 // should enable it, enable it or die. 1872 // should enable it, enable it or die.
1870 bool started_sandbox = StartBpfSandbox(command_line, process_type); 1873 bool started_sandbox = StartBpfSandbox(command_line, process_type);
1871 CHECK(started_sandbox); 1874 CHECK(started_sandbox);
1872 return true; 1875 return true;
1873 } 1876 }
1874 #endif 1877 #endif
1875 return false; 1878 return false;
1876 } 1879 }
1877 1880
1878 } // namespace content 1881 } // namespace content
OLDNEW
« no previous file with comments | « no previous file | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698