Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(704)

Unified Diff: mojo/shell/runner/host/linux_sandbox.h

Issue 1877753003: Move mojo\shell to services\shell (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@62scan
Patch Set: . Created 4 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: mojo/shell/runner/host/linux_sandbox.h
diff --git a/mojo/shell/runner/host/linux_sandbox.h b/mojo/shell/runner/host/linux_sandbox.h
deleted file mode 100644
index df81cf4d7ef59016db1319ab07ec0670c2b7c21d..0000000000000000000000000000000000000000
--- a/mojo/shell/runner/host/linux_sandbox.h
+++ /dev/null
@@ -1,53 +0,0 @@
-// Copyright 2015 The Chromium Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style license that can be
-// found in the LICENSE file.
-
-#ifndef MOJO_SHELL_RUNNER_HOST_LINUX_SANDBOX_H_
-#define MOJO_SHELL_RUNNER_HOST_LINUX_SANDBOX_H_
-
-#include <memory>
-
-#include "base/files/scoped_file.h"
-#include "base/macros.h"
-#include "sandbox/linux/bpf_dsl/bpf_dsl.h"
-#include "sandbox/linux/bpf_dsl/policy.h"
-#include "sandbox/linux/syscall_broker/broker_process.h"
-
-namespace mojo {
-namespace shell {
-
-// Encapsulates all tasks related to raising the sandbox for mojo runner.
-class LinuxSandbox {
- public:
- explicit LinuxSandbox(
- const std::vector<sandbox::syscall_broker::BrokerFilePermission>&
- permissions);
- ~LinuxSandbox();
-
- // Grabs a file descriptor to /proc.
- void Warmup();
-
- // Puts the user in a new PID namespace.
- void EngageNamespaceSandbox();
-
- // Starts a broker process and sets up seccomp-bpf to delegate decisions to
- // it.
- void EngageSeccompSandbox();
-
- // Performs the dropping of access to the outside world (drops the reference
- // to /proc acquired in Warmup().
- void Seal();
-
- private:
- bool warmed_up_;
- base::ScopedFD proc_fd_;
- std::unique_ptr<sandbox::syscall_broker::BrokerProcess> broker_;
- std::unique_ptr<sandbox::bpf_dsl::Policy> policy_;
-
- DISALLOW_COPY_AND_ASSIGN(LinuxSandbox);
-};
-
-} // namespace shell
-} // namespace mojo
-
-#endif // MOJO_SHELL_RUNNER_HOST_LINUX_SANDBOX_H_
« no previous file with comments | « mojo/shell/runner/host/in_process_native_runner_unittest.cc ('k') | mojo/shell/runner/host/linux_sandbox.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698