OLD | NEW |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "sandbox/linux/services/yama.h" | 5 #include "sandbox/linux/services/yama.h" |
6 | 6 |
7 #include <fcntl.h> | 7 #include <fcntl.h> |
8 #include <sys/prctl.h> | 8 #include <sys/prctl.h> |
9 #include <sys/stat.h> | 9 #include <sys/stat.h> |
10 #include <sys/types.h> | 10 #include <sys/types.h> |
11 #include <unistd.h> | 11 #include <unistd.h> |
12 | 12 |
13 #include "base/basictypes.h" | 13 #include "base/basictypes.h" |
14 #include "base/file_util.h" | 14 #include "base/file_util.h" |
| 15 #include "base/files/scoped_file.h" |
15 #include "base/logging.h" | 16 #include "base/logging.h" |
16 #include "base/posix/eintr_wrapper.h" | 17 #include "base/posix/eintr_wrapper.h" |
17 | 18 |
18 #if !defined(PR_SET_PTRACER_ANY) | 19 #if !defined(PR_SET_PTRACER_ANY) |
19 #define PR_SET_PTRACER_ANY ((unsigned long)-1) | 20 #define PR_SET_PTRACER_ANY ((unsigned long)-1) |
20 #endif | 21 #endif |
21 | 22 |
22 #if !defined(PR_SET_PTRACER) | 23 #if !defined(PR_SET_PTRACER) |
23 #define PR_SET_PTRACER 0x59616d61 | 24 #define PR_SET_PTRACER 0x59616d61 |
24 #endif | 25 #endif |
(...skipping 46 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
71 } | 72 } |
72 | 73 |
73 // static | 74 // static |
74 int Yama::GetStatus() { | 75 int Yama::GetStatus() { |
75 if (!CanAccessProcFS()) { | 76 if (!CanAccessProcFS()) { |
76 return 0; | 77 return 0; |
77 } | 78 } |
78 | 79 |
79 static const char kPtraceScopePath[] = "/proc/sys/kernel/yama/ptrace_scope"; | 80 static const char kPtraceScopePath[] = "/proc/sys/kernel/yama/ptrace_scope"; |
80 | 81 |
81 int yama_scope = open(kPtraceScopePath, O_RDONLY); | 82 base::ScopedFD yama_scope(open(kPtraceScopePath, O_RDONLY)); |
82 | 83 |
83 if (yama_scope < 0) { | 84 if (!yama_scope) { |
84 const int open_errno = errno; | 85 const int open_errno = errno; |
85 DCHECK(ENOENT == open_errno); | 86 DCHECK(ENOENT == open_errno); |
86 // The status is known, yama is not present. | 87 // The status is known, yama is not present. |
87 return STATUS_KNOWN; | 88 return STATUS_KNOWN; |
88 } | 89 } |
89 | 90 |
90 file_util::ScopedFDCloser yama_scope_closer(&yama_scope); | |
91 char yama_scope_value = 0; | 91 char yama_scope_value = 0; |
92 ssize_t num_read = read(yama_scope, &yama_scope_value, 1); | 92 ssize_t num_read = read(yama_scope.get(), &yama_scope_value, 1); |
93 PCHECK(1 == num_read); | 93 PCHECK(1 == num_read); |
94 | 94 |
95 switch (yama_scope_value) { | 95 switch (yama_scope_value) { |
96 case '0': | 96 case '0': |
97 return STATUS_KNOWN | STATUS_PRESENT; | 97 return STATUS_KNOWN | STATUS_PRESENT; |
98 case '1': | 98 case '1': |
99 return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING; | 99 return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING; |
100 case '2': | 100 case '2': |
101 case '3': | 101 case '3': |
102 return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING | | 102 return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING | |
103 STATUS_STRICT_ENFORCING; | 103 STATUS_STRICT_ENFORCING; |
104 default: | 104 default: |
105 NOTREACHED(); | 105 NOTREACHED(); |
106 return 0; | 106 return 0; |
107 } | 107 } |
108 } | 108 } |
109 | 109 |
110 // static | 110 // static |
111 bool Yama::IsPresent() { return GetStatus() & STATUS_PRESENT; } | 111 bool Yama::IsPresent() { return GetStatus() & STATUS_PRESENT; } |
112 | 112 |
113 // static | 113 // static |
114 bool Yama::IsEnforcing() { return GetStatus() & STATUS_ENFORCING; } | 114 bool Yama::IsEnforcing() { return GetStatus() & STATUS_ENFORCING; } |
115 | 115 |
116 } // namespace sandbox | 116 } // namespace sandbox |
OLD | NEW |