OLD | NEW |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "sandbox/linux/services/yama.h" | 5 #include "sandbox/linux/services/yama.h" |
6 | 6 |
7 #include <fcntl.h> | 7 #include <fcntl.h> |
8 #include <sys/prctl.h> | 8 #include <sys/prctl.h> |
9 #include <sys/stat.h> | 9 #include <sys/stat.h> |
10 #include <sys/types.h> | 10 #include <sys/types.h> |
11 #include <unistd.h> | 11 #include <unistd.h> |
12 | 12 |
13 #include "base/basictypes.h" | 13 #include "base/basictypes.h" |
14 #include "base/file_util.h" | 14 #include "base/file_util.h" |
15 #include "base/files/scoped_file.h" | |
16 #include "base/logging.h" | 15 #include "base/logging.h" |
17 #include "base/posix/eintr_wrapper.h" | 16 #include "base/posix/eintr_wrapper.h" |
18 | 17 |
19 #if !defined(PR_SET_PTRACER_ANY) | 18 #if !defined(PR_SET_PTRACER_ANY) |
20 #define PR_SET_PTRACER_ANY ((unsigned long)-1) | 19 #define PR_SET_PTRACER_ANY ((unsigned long)-1) |
21 #endif | 20 #endif |
22 | 21 |
23 #if !defined(PR_SET_PTRACER) | 22 #if !defined(PR_SET_PTRACER) |
24 #define PR_SET_PTRACER 0x59616d61 | 23 #define PR_SET_PTRACER 0x59616d61 |
25 #endif | 24 #endif |
(...skipping 46 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
72 } | 71 } |
73 | 72 |
74 // static | 73 // static |
75 int Yama::GetStatus() { | 74 int Yama::GetStatus() { |
76 if (!CanAccessProcFS()) { | 75 if (!CanAccessProcFS()) { |
77 return 0; | 76 return 0; |
78 } | 77 } |
79 | 78 |
80 static const char kPtraceScopePath[] = "/proc/sys/kernel/yama/ptrace_scope"; | 79 static const char kPtraceScopePath[] = "/proc/sys/kernel/yama/ptrace_scope"; |
81 | 80 |
82 base::ScopedFD yama_scope(open(kPtraceScopePath, O_RDONLY)); | 81 int yama_scope = open(kPtraceScopePath, O_RDONLY); |
83 | 82 |
84 if (!yama_scope.is_valid()) { | 83 if (yama_scope < 0) { |
85 const int open_errno = errno; | 84 const int open_errno = errno; |
86 DCHECK(ENOENT == open_errno); | 85 DCHECK(ENOENT == open_errno); |
87 // The status is known, yama is not present. | 86 // The status is known, yama is not present. |
88 return STATUS_KNOWN; | 87 return STATUS_KNOWN; |
89 } | 88 } |
90 | 89 |
| 90 file_util::ScopedFDCloser yama_scope_closer(&yama_scope); |
91 char yama_scope_value = 0; | 91 char yama_scope_value = 0; |
92 ssize_t num_read = read(yama_scope.get(), &yama_scope_value, 1); | 92 ssize_t num_read = read(yama_scope, &yama_scope_value, 1); |
93 PCHECK(1 == num_read); | 93 PCHECK(1 == num_read); |
94 | 94 |
95 switch (yama_scope_value) { | 95 switch (yama_scope_value) { |
96 case '0': | 96 case '0': |
97 return STATUS_KNOWN | STATUS_PRESENT; | 97 return STATUS_KNOWN | STATUS_PRESENT; |
98 case '1': | 98 case '1': |
99 return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING; | 99 return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING; |
100 case '2': | 100 case '2': |
101 case '3': | 101 case '3': |
102 return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING | | 102 return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING | |
103 STATUS_STRICT_ENFORCING; | 103 STATUS_STRICT_ENFORCING; |
104 default: | 104 default: |
105 NOTREACHED(); | 105 NOTREACHED(); |
106 return 0; | 106 return 0; |
107 } | 107 } |
108 } | 108 } |
109 | 109 |
110 // static | 110 // static |
111 bool Yama::IsPresent() { return GetStatus() & STATUS_PRESENT; } | 111 bool Yama::IsPresent() { return GetStatus() & STATUS_PRESENT; } |
112 | 112 |
113 // static | 113 // static |
114 bool Yama::IsEnforcing() { return GetStatus() & STATUS_ENFORCING; } | 114 bool Yama::IsEnforcing() { return GetStatus() & STATUS_ENFORCING; } |
115 | 115 |
116 } // namespace sandbox | 116 } // namespace sandbox |
OLD | NEW |