OLD | NEW |
1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef MOJO_SHELL_RUNNER_HOST_LINUX_SANDBOX_H_ | 5 #ifndef MOJO_SHELL_RUNNER_HOST_LINUX_SANDBOX_H_ |
6 #define MOJO_SHELL_RUNNER_HOST_LINUX_SANDBOX_H_ | 6 #define MOJO_SHELL_RUNNER_HOST_LINUX_SANDBOX_H_ |
7 | 7 |
| 8 #include <memory> |
| 9 |
8 #include "base/files/scoped_file.h" | 10 #include "base/files/scoped_file.h" |
9 #include "base/macros.h" | 11 #include "base/macros.h" |
10 #include "sandbox/linux/bpf_dsl/bpf_dsl.h" | 12 #include "sandbox/linux/bpf_dsl/bpf_dsl.h" |
11 #include "sandbox/linux/bpf_dsl/policy.h" | 13 #include "sandbox/linux/bpf_dsl/policy.h" |
12 #include "sandbox/linux/syscall_broker/broker_process.h" | 14 #include "sandbox/linux/syscall_broker/broker_process.h" |
13 | 15 |
14 namespace mojo { | 16 namespace mojo { |
15 namespace shell { | 17 namespace shell { |
16 | 18 |
17 // Encapsulates all tasks related to raising the sandbox for mojo runner. | 19 // Encapsulates all tasks related to raising the sandbox for mojo runner. |
(...skipping 14 matching lines...) Expand all Loading... |
32 // it. | 34 // it. |
33 void EngageSeccompSandbox(); | 35 void EngageSeccompSandbox(); |
34 | 36 |
35 // Performs the dropping of access to the outside world (drops the reference | 37 // Performs the dropping of access to the outside world (drops the reference |
36 // to /proc acquired in Warmup(). | 38 // to /proc acquired in Warmup(). |
37 void Seal(); | 39 void Seal(); |
38 | 40 |
39 private: | 41 private: |
40 bool warmed_up_; | 42 bool warmed_up_; |
41 base::ScopedFD proc_fd_; | 43 base::ScopedFD proc_fd_; |
42 scoped_ptr<sandbox::syscall_broker::BrokerProcess> broker_; | 44 std::unique_ptr<sandbox::syscall_broker::BrokerProcess> broker_; |
43 scoped_ptr<sandbox::bpf_dsl::Policy> policy_; | 45 std::unique_ptr<sandbox::bpf_dsl::Policy> policy_; |
44 | 46 |
45 DISALLOW_COPY_AND_ASSIGN(LinuxSandbox); | 47 DISALLOW_COPY_AND_ASSIGN(LinuxSandbox); |
46 }; | 48 }; |
47 | 49 |
48 } // namespace shell | 50 } // namespace shell |
49 } // namespace mojo | 51 } // namespace mojo |
50 | 52 |
51 #endif // MOJO_SHELL_RUNNER_HOST_LINUX_SANDBOX_H_ | 53 #endif // MOJO_SHELL_RUNNER_HOST_LINUX_SANDBOX_H_ |
OLD | NEW |