OLD | NEW |
1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "sandbox/linux/services/credentials.h" | 5 #include "sandbox/linux/services/credentials.h" |
6 | 6 |
7 #include <errno.h> | 7 #include <errno.h> |
8 #include <limits.h> | 8 #include <limits.h> |
9 #include <signal.h> | 9 #include <signal.h> |
10 #include <stddef.h> | 10 #include <stddef.h> |
(...skipping 76 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
87 bool ChrootToSafeEmptyDir() { | 87 bool ChrootToSafeEmptyDir() { |
88 // We need to chroot to a fdinfo that is unique to a process and have that | 88 // We need to chroot to a fdinfo that is unique to a process and have that |
89 // process die. | 89 // process die. |
90 // 1. We don't want to simply fork() because duplicating the page tables is | 90 // 1. We don't want to simply fork() because duplicating the page tables is |
91 // slow with a big address space. | 91 // slow with a big address space. |
92 // 2. We do not use a regular thread (that would unshare CLONE_FILES) because | 92 // 2. We do not use a regular thread (that would unshare CLONE_FILES) because |
93 // when we are in a PID namespace, we cannot easily get a handle to the | 93 // when we are in a PID namespace, we cannot easily get a handle to the |
94 // /proc/tid directory for the thread (since /proc may not be aware of the | 94 // /proc/tid directory for the thread (since /proc may not be aware of the |
95 // PID namespace). With a process, we can just use /proc/self. | 95 // PID namespace). With a process, we can just use /proc/self. |
96 pid_t pid = -1; | 96 pid_t pid = -1; |
97 char stack_buf[PTHREAD_STACK_MIN] ALIGNAS(16); | 97 alignas(16) char stack_buf[PTHREAD_STACK_MIN]; |
98 #if defined(ARCH_CPU_X86_FAMILY) || defined(ARCH_CPU_ARM_FAMILY) || \ | 98 #if defined(ARCH_CPU_X86_FAMILY) || defined(ARCH_CPU_ARM_FAMILY) || \ |
99 defined(ARCH_CPU_MIPS_FAMILY) | 99 defined(ARCH_CPU_MIPS_FAMILY) |
100 // The stack grows downward. | 100 // The stack grows downward. |
101 void* stack = stack_buf + sizeof(stack_buf); | 101 void* stack = stack_buf + sizeof(stack_buf); |
102 #else | 102 #else |
103 #error "Unsupported architecture" | 103 #error "Unsupported architecture" |
104 #endif | 104 #endif |
105 | 105 |
106 int clone_flags = CLONE_FS | LINUX_SIGCHLD; | 106 int clone_flags = CLONE_FS | LINUX_SIGCHLD; |
107 void* tls = nullptr; | 107 void* tls = nullptr; |
(...skipping 239 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
347 if (pid != 0) { | 347 if (pid != 0) { |
348 return pid; | 348 return pid; |
349 } | 349 } |
350 | 350 |
351 // Since we just forked, we are single threaded. | 351 // Since we just forked, we are single threaded. |
352 PCHECK(DropAllCapabilitiesOnCurrentThread()); | 352 PCHECK(DropAllCapabilitiesOnCurrentThread()); |
353 return 0; | 353 return 0; |
354 } | 354 } |
355 | 355 |
356 } // namespace sandbox. | 356 } // namespace sandbox. |
OLD | NEW |