| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ | 5 #ifndef SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ |
| 6 #define SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ | 6 #define SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ |
| 7 | 7 |
| 8 #include <string> | 8 #include <string> |
| 9 #include <vector> | 9 #include <vector> |
| 10 | 10 |
| 11 #include "base/basictypes.h" | 11 #include "base/basictypes.h" |
| 12 #include "base/callback_forward.h" | 12 #include "base/callback_forward.h" |
| 13 #include "base/pickle.h" | 13 #include "base/pickle.h" |
| 14 #include "base/process/process.h" | 14 #include "base/process/process.h" |
| 15 #include "sandbox/linux/sandbox_export.h" | 15 #include "sandbox/sandbox_export.h" |
| 16 | 16 |
| 17 namespace sandbox { | 17 namespace sandbox { |
| 18 | 18 |
| 19 // Create a new "broker" process to which we can send requests via an IPC | 19 // Create a new "broker" process to which we can send requests via an IPC |
| 20 // channel. | 20 // channel. |
| 21 // This is a low level IPC mechanism that is suitable to be called from a | 21 // This is a low level IPC mechanism that is suitable to be called from a |
| 22 // signal handler. | 22 // signal handler. |
| 23 // A process would typically create a broker process before entering | 23 // A process would typically create a broker process before entering |
| 24 // sandboxing. | 24 // sandboxing. |
| 25 // 1. BrokerProcess open_broker(read_whitelist, write_whitelist); | 25 // 1. BrokerProcess open_broker(read_whitelist, write_whitelist); |
| (...skipping 71 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 97 const std::vector<std::string> allowed_w_files_; // Files allowed for write. | 97 const std::vector<std::string> allowed_w_files_; // Files allowed for write. |
| 98 int ipc_socketpair_; // Our communication channel to parent or child. | 98 int ipc_socketpair_; // Our communication channel to parent or child. |
| 99 DISALLOW_IMPLICIT_CONSTRUCTORS(BrokerProcess); | 99 DISALLOW_IMPLICIT_CONSTRUCTORS(BrokerProcess); |
| 100 | 100 |
| 101 friend class BrokerProcessTestHelper; | 101 friend class BrokerProcessTestHelper; |
| 102 }; | 102 }; |
| 103 | 103 |
| 104 } // namespace sandbox | 104 } // namespace sandbox |
| 105 | 105 |
| 106 #endif // SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ | 106 #endif // SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ |
| OLD | NEW |