OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "content/zygote/zygote_main.h" | 5 #include "content/zygote/zygote_main.h" |
6 | 6 |
7 #include <dlfcn.h> | 7 #include <dlfcn.h> |
8 #include <fcntl.h> | 8 #include <fcntl.h> |
9 #include <pthread.h> | 9 #include <pthread.h> |
10 #include <stdio.h> | 10 #include <stdio.h> |
11 #include <sys/socket.h> | 11 #include <sys/socket.h> |
12 #include <sys/stat.h> | 12 #include <sys/stat.h> |
13 #include <sys/types.h> | 13 #include <sys/types.h> |
14 #include <sys/wait.h> | 14 #include <sys/wait.h> |
15 #include <unistd.h> | 15 #include <unistd.h> |
16 | 16 |
17 #include "base/basictypes.h" | 17 #include "base/basictypes.h" |
18 #include "base/command_line.h" | 18 #include "base/command_line.h" |
19 #include "base/linux_util.h" | 19 #include "base/linux_util.h" |
20 #include "base/native_library.h" | 20 #include "base/native_library.h" |
21 #include "base/pickle.h" | 21 #include "base/pickle.h" |
22 #include "base/posix/eintr_wrapper.h" | 22 #include "base/posix/eintr_wrapper.h" |
23 #include "base/posix/unix_domain_socket_linux.h" | 23 #include "base/posix/unix_domain_socket_linux.h" |
24 #include "base/rand_util.h" | 24 #include "base/rand_util.h" |
25 #include "base/sys_info.h" | 25 #include "base/sys_info.h" |
26 #include "build/build_config.h" | 26 #include "build/build_config.h" |
| 27 #include "content/common/child_process_sandbox_support_impl_linux.h" |
27 #include "content/common/font_config_ipc_linux.h" | 28 #include "content/common/font_config_ipc_linux.h" |
28 #include "content/common/pepper_plugin_list.h" | 29 #include "content/common/pepper_plugin_list.h" |
29 #include "content/common/sandbox_linux.h" | 30 #include "content/common/sandbox_linux.h" |
30 #include "content/common/zygote_commands_linux.h" | 31 #include "content/common/zygote_commands_linux.h" |
31 #include "content/public/common/content_switches.h" | 32 #include "content/public/common/content_switches.h" |
32 #include "content/public/common/main_function_params.h" | 33 #include "content/public/common/main_function_params.h" |
33 #include "content/public/common/pepper_plugin_info.h" | 34 #include "content/public/common/pepper_plugin_info.h" |
34 #include "content/public/common/sandbox_linux.h" | 35 #include "content/public/common/sandbox_linux.h" |
35 #include "content/public/common/zygote_fork_delegate_linux.h" | 36 #include "content/public/common/zygote_fork_delegate_linux.h" |
36 #include "content/zygote/zygote_linux.h" | 37 #include "content/zygote/zygote_linux.h" |
(...skipping 22 matching lines...) Expand all Loading... |
59 static void ProxyLocaltimeCallToBrowser(time_t input, struct tm* output, | 60 static void ProxyLocaltimeCallToBrowser(time_t input, struct tm* output, |
60 char* timezone_out, | 61 char* timezone_out, |
61 size_t timezone_out_len) { | 62 size_t timezone_out_len) { |
62 Pickle request; | 63 Pickle request; |
63 request.WriteInt(LinuxSandbox::METHOD_LOCALTIME); | 64 request.WriteInt(LinuxSandbox::METHOD_LOCALTIME); |
64 request.WriteString( | 65 request.WriteString( |
65 std::string(reinterpret_cast<char*>(&input), sizeof(input))); | 66 std::string(reinterpret_cast<char*>(&input), sizeof(input))); |
66 | 67 |
67 uint8_t reply_buf[512]; | 68 uint8_t reply_buf[512]; |
68 const ssize_t r = UnixDomainSocket::SendRecvMsg( | 69 const ssize_t r = UnixDomainSocket::SendRecvMsg( |
69 Zygote::kMagicSandboxIPCDescriptor, reply_buf, sizeof(reply_buf), NULL, | 70 GetSandboxFD(), reply_buf, sizeof(reply_buf), NULL, |
70 request); | 71 request); |
71 if (r == -1) { | 72 if (r == -1) { |
72 memset(output, 0, sizeof(struct tm)); | 73 memset(output, 0, sizeof(struct tm)); |
73 return; | 74 return; |
74 } | 75 } |
75 | 76 |
76 Pickle reply(reinterpret_cast<char*>(reply_buf), r); | 77 Pickle reply(reinterpret_cast<char*>(reply_buf), r); |
77 PickleIterator iter(reply); | 78 PickleIterator iter(reply); |
78 std::string result, timezone; | 79 std::string result, timezone; |
79 if (!reply.ReadString(&iter, &result) || | 80 if (!reply.ReadString(&iter, &result) || |
(...skipping 215 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
295 #error Which SSL library are you using? | 296 #error Which SSL library are you using? |
296 #endif | 297 #endif |
297 #if defined(ENABLE_PLUGINS) | 298 #if defined(ENABLE_PLUGINS) |
298 // Ensure access to the Pepper plugins before the sandbox is turned on. | 299 // Ensure access to the Pepper plugins before the sandbox is turned on. |
299 PreloadPepperPlugins(); | 300 PreloadPepperPlugins(); |
300 #endif | 301 #endif |
301 #if defined(ENABLE_WEBRTC) | 302 #if defined(ENABLE_WEBRTC) |
302 InitializeWebRtcModule(); | 303 InitializeWebRtcModule(); |
303 #endif | 304 #endif |
304 SkFontConfigInterface::SetGlobal( | 305 SkFontConfigInterface::SetGlobal( |
305 new FontConfigIPC(Zygote::kMagicSandboxIPCDescriptor))->unref(); | 306 new FontConfigIPC(GetSandboxFD()))->unref(); |
306 } | 307 } |
307 | 308 |
308 // Do nothing here | 309 // Do nothing here |
309 static void SIGCHLDHandler(int signal) { | 310 static void SIGCHLDHandler(int signal) { |
310 } | 311 } |
311 | 312 |
312 // The current process will become a process reaper like init. | 313 // The current process will become a process reaper like init. |
313 // We fork a child that will continue normally, when it dies, we can safely | 314 // We fork a child that will continue normally, when it dies, we can safely |
314 // exit. | 315 // exit. |
315 // We need to be careful we close the magic kZygoteIdFd properly in the parent | 316 // We need to be careful we close the magic kZygoteIdFd properly in the parent |
(...skipping 145 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
461 ZygoteForkDelegate* forkdelegate) { | 462 ZygoteForkDelegate* forkdelegate) { |
462 g_am_zygote_or_renderer = true; | 463 g_am_zygote_or_renderer = true; |
463 sandbox::InitLibcUrandomOverrides(); | 464 sandbox::InitLibcUrandomOverrides(); |
464 | 465 |
465 LinuxSandbox* linux_sandbox = LinuxSandbox::GetInstance(); | 466 LinuxSandbox* linux_sandbox = LinuxSandbox::GetInstance(); |
466 // This will pre-initialize the various sandboxes that need it. | 467 // This will pre-initialize the various sandboxes that need it. |
467 linux_sandbox->PreinitializeSandbox(); | 468 linux_sandbox->PreinitializeSandbox(); |
468 | 469 |
469 if (forkdelegate != NULL) { | 470 if (forkdelegate != NULL) { |
470 VLOG(1) << "ZygoteMain: initializing fork delegate"; | 471 VLOG(1) << "ZygoteMain: initializing fork delegate"; |
471 forkdelegate->Init(Zygote::kMagicSandboxIPCDescriptor); | 472 forkdelegate->Init(GetSandboxFD()); |
472 } else { | 473 } else { |
473 VLOG(1) << "ZygoteMain: fork delegate is NULL"; | 474 VLOG(1) << "ZygoteMain: fork delegate is NULL"; |
474 } | 475 } |
475 | 476 |
476 // Turn on the sandbox. | 477 // Turn on the sandbox. |
477 bool using_suid_sandbox = false; | 478 bool using_suid_sandbox = false; |
478 bool has_started_new_init = false; | 479 bool has_started_new_init = false; |
479 | 480 |
480 if (!EnterSuidSandbox(linux_sandbox, | 481 if (!EnterSuidSandbox(linux_sandbox, |
481 &using_suid_sandbox, | 482 &using_suid_sandbox, |
(...skipping 13 matching lines...) Expand all Loading... |
495 } | 496 } |
496 | 497 |
497 int sandbox_flags = linux_sandbox->GetStatus(); | 498 int sandbox_flags = linux_sandbox->GetStatus(); |
498 | 499 |
499 Zygote zygote(sandbox_flags, forkdelegate); | 500 Zygote zygote(sandbox_flags, forkdelegate); |
500 // This function call can return multiple times, once per fork(). | 501 // This function call can return multiple times, once per fork(). |
501 return zygote.ProcessRequests(); | 502 return zygote.ProcessRequests(); |
502 } | 503 } |
503 | 504 |
504 } // namespace content | 505 } // namespace content |
OLD | NEW |