| OLD | NEW | 
|---|
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be | 
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. | 
| 4 | 4 | 
| 5 #include "sandbox/linux/services/yama.h" | 5 #include "sandbox/linux/services/yama.h" | 
| 6 | 6 | 
| 7 #include <fcntl.h> | 7 #include <fcntl.h> | 
| 8 #include <sys/prctl.h> | 8 #include <sys/prctl.h> | 
| 9 #include <sys/stat.h> | 9 #include <sys/stat.h> | 
| 10 #include <sys/types.h> | 10 #include <sys/types.h> | 
| 11 #include <unistd.h> | 11 #include <unistd.h> | 
| 12 | 12 | 
| 13 #include "base/basictypes.h" | 13 #include "base/basictypes.h" | 
| 14 #include "base/file_util.h" | 14 #include "base/file_util.h" | 
| 15 #include "base/files/scoped_file.h" |  | 
| 16 #include "base/logging.h" | 15 #include "base/logging.h" | 
| 17 #include "base/posix/eintr_wrapper.h" | 16 #include "base/posix/eintr_wrapper.h" | 
| 18 | 17 | 
| 19 #if !defined(PR_SET_PTRACER_ANY) | 18 #if !defined(PR_SET_PTRACER_ANY) | 
| 20 #define PR_SET_PTRACER_ANY ((unsigned long)-1) | 19 #define PR_SET_PTRACER_ANY ((unsigned long)-1) | 
| 21 #endif | 20 #endif | 
| 22 | 21 | 
| 23 #if !defined(PR_SET_PTRACER) | 22 #if !defined(PR_SET_PTRACER) | 
| 24 #define PR_SET_PTRACER 0x59616d61 | 23 #define PR_SET_PTRACER 0x59616d61 | 
| 25 #endif | 24 #endif | 
| (...skipping 46 matching lines...) Expand 10 before | Expand all | Expand 10 after  Loading... | 
| 72 } | 71 } | 
| 73 | 72 | 
| 74 // static | 73 // static | 
| 75 int Yama::GetStatus() { | 74 int Yama::GetStatus() { | 
| 76   if (!CanAccessProcFS()) { | 75   if (!CanAccessProcFS()) { | 
| 77     return 0; | 76     return 0; | 
| 78   } | 77   } | 
| 79 | 78 | 
| 80   static const char kPtraceScopePath[] = "/proc/sys/kernel/yama/ptrace_scope"; | 79   static const char kPtraceScopePath[] = "/proc/sys/kernel/yama/ptrace_scope"; | 
| 81 | 80 | 
| 82   base::ScopedFD yama_scope(open(kPtraceScopePath, O_RDONLY)); | 81   int yama_scope = open(kPtraceScopePath, O_RDONLY); | 
| 83 | 82 | 
| 84   if (!yama_scope.is_valid()) { | 83   if (yama_scope < 0) { | 
| 85     const int open_errno = errno; | 84     const int open_errno = errno; | 
| 86     DCHECK(ENOENT == open_errno); | 85     DCHECK(ENOENT == open_errno); | 
| 87     // The status is known, yama is not present. | 86     // The status is known, yama is not present. | 
| 88     return STATUS_KNOWN; | 87     return STATUS_KNOWN; | 
| 89   } | 88   } | 
| 90 | 89 | 
|  | 90   file_util::ScopedFDCloser yama_scope_closer(&yama_scope); | 
| 91   char yama_scope_value = 0; | 91   char yama_scope_value = 0; | 
| 92   ssize_t num_read = read(yama_scope.get(), &yama_scope_value, 1); | 92   ssize_t num_read = read(yama_scope, &yama_scope_value, 1); | 
| 93   PCHECK(1 == num_read); | 93   PCHECK(1 == num_read); | 
| 94 | 94 | 
| 95   switch (yama_scope_value) { | 95   switch (yama_scope_value) { | 
| 96     case '0': | 96     case '0': | 
| 97       return STATUS_KNOWN | STATUS_PRESENT; | 97       return STATUS_KNOWN | STATUS_PRESENT; | 
| 98     case '1': | 98     case '1': | 
| 99       return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING; | 99       return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING; | 
| 100     case '2': | 100     case '2': | 
| 101     case '3': | 101     case '3': | 
| 102       return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING | | 102       return STATUS_KNOWN | STATUS_PRESENT | STATUS_ENFORCING | | 
| 103              STATUS_STRICT_ENFORCING; | 103              STATUS_STRICT_ENFORCING; | 
| 104     default: | 104     default: | 
| 105       NOTREACHED(); | 105       NOTREACHED(); | 
| 106       return 0; | 106       return 0; | 
| 107   } | 107   } | 
| 108 } | 108 } | 
| 109 | 109 | 
| 110 // static | 110 // static | 
| 111 bool Yama::IsPresent() { return GetStatus() & STATUS_PRESENT; } | 111 bool Yama::IsPresent() { return GetStatus() & STATUS_PRESENT; } | 
| 112 | 112 | 
| 113 // static | 113 // static | 
| 114 bool Yama::IsEnforcing() { return GetStatus() & STATUS_ENFORCING; } | 114 bool Yama::IsEnforcing() { return GetStatus() & STATUS_ENFORCING; } | 
| 115 | 115 | 
| 116 }  // namespace sandbox | 116 }  // namespace sandbox | 
| OLD | NEW | 
|---|