Chromium Code Reviews| OLD | NEW |
|---|---|
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "sandbox/linux/services/yama.h" | 5 #include "sandbox/linux/services/yama.h" |
| 6 | 6 |
| 7 #include <fcntl.h> | 7 #include <fcntl.h> |
| 8 #include <sys/prctl.h> | 8 #include <sys/prctl.h> |
| 9 #include <sys/stat.h> | 9 #include <sys/stat.h> |
| 10 #include <sys/types.h> | 10 #include <sys/types.h> |
| 11 #include <unistd.h> | 11 #include <unistd.h> |
| 12 | 12 |
| 13 #include "base/basictypes.h" | 13 #include "base/basictypes.h" |
| 14 #include "base/file_util.h" | 14 #include "base/file_util.h" |
| 15 #include "base/files/scoped_file.h" | |
| 15 #include "base/logging.h" | 16 #include "base/logging.h" |
| 16 #include "base/posix/eintr_wrapper.h" | 17 #include "base/posix/eintr_wrapper.h" |
| 17 | 18 |
| 18 #if !defined(PR_SET_PTRACER_ANY) | 19 #if !defined(PR_SET_PTRACER_ANY) |
| 19 #define PR_SET_PTRACER_ANY ((unsigned long)-1) | 20 #define PR_SET_PTRACER_ANY ((unsigned long)-1) |
| 20 #endif | 21 #endif |
| 21 | 22 |
| 22 #if !defined(PR_SET_PTRACER) | 23 #if !defined(PR_SET_PTRACER) |
| 23 #define PR_SET_PTRACER 0x59616d61 | 24 #define PR_SET_PTRACER 0x59616d61 |
| 24 #endif | 25 #endif |
| (...skipping 46 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
| 71 } | 72 } |
| 72 | 73 |
| 73 // static | 74 // static |
| 74 int Yama::GetStatus() { | 75 int Yama::GetStatus() { |
| 75 if (!CanAccessProcFS()) { | 76 if (!CanAccessProcFS()) { |
| 76 return 0; | 77 return 0; |
| 77 } | 78 } |
| 78 | 79 |
| 79 static const char kPtraceScopePath[] = "/proc/sys/kernel/yama/ptrace_scope"; | 80 static const char kPtraceScopePath[] = "/proc/sys/kernel/yama/ptrace_scope"; |
| 80 | 81 |
| 81 int yama_scope = open(kPtraceScopePath, O_RDONLY); | 82 base::ScopedFD yama_scope(open(kPtraceScopePath, O_RDONLY)); |
|
agl
2014/03/18 06:52:05
HANDLE_EINTR
| |
| 82 | 83 |
| 83 if (yama_scope < 0) { | 84 if (!yama_scope.is_valid()) { |
| 84 const int open_errno = errno; | 85 const int open_errno = errno; |
| 85 DCHECK(ENOENT == open_errno); | 86 DCHECK(ENOENT == open_errno); |
| 86 // The status is known, yama is not present. | 87 // The status is known, yama is not present. |
| 87 return STATUS_KNOWN; | 88 return STATUS_KNOWN; |
| 88 } | 89 } |
| 89 | 90 |
| 90 file_util::ScopedFDCloser yama_scope_closer(&yama_scope); | |
| 91 char yama_scope_value = 0; | 91 char yama_scope_value = 0; |
| 92 ssize_t num_read = read(yama_scope, &yama_scope_value, 1); | 92 ssize_t num_read = read(yama_scope.get(), &yama_scope_value, 1); |
|
agl
2014/03/18 06:52:05
HANDLE_EINTR
| |
| 93 PCHECK(1 == num_read); | 93 PCHECK(1 == num_read); |
| 94 | 94 |
| 95 switch (yama_scope_value) { | 95 switch (yama_scope_value) { |
| 96 case '0': | 96 case '0': |
| 97 return STATUS_KNOWN | STATUS_PRESENT; | 97 return STATUS_KNOWN | STATUS_PRESENT; |
| 98 case '1': | 98 case '1': |
| 99 return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING; | 99 return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING; |
| 100 case '2': | 100 case '2': |
| 101 case '3': | 101 case '3': |
| 102 return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING | | 102 return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING | |
| 103 STATUS_STRICT_ENFORCING; | 103 STATUS_STRICT_ENFORCING; |
| 104 default: | 104 default: |
| 105 NOTREACHED(); | 105 NOTREACHED(); |
| 106 return 0; | 106 return 0; |
| 107 } | 107 } |
| 108 } | 108 } |
| 109 | 109 |
| 110 // static | 110 // static |
| 111 bool Yama::IsPresent() { return GetStatus() & STATUS_PRESENT; } | 111 bool Yama::IsPresent() { return GetStatus() & STATUS_PRESENT; } |
| 112 | 112 |
| 113 // static | 113 // static |
| 114 bool Yama::IsEnforcing() { return GetStatus() & STATUS_ENFORCING; } | 114 bool Yama::IsEnforcing() { return GetStatus() & STATUS_ENFORCING; } |
| 115 | 115 |
| 116 } // namespace sandbox | 116 } // namespace sandbox |
| OLD | NEW |