OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ | 5 #ifndef SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ |
6 #define SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ | 6 #define SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ |
7 | 7 |
8 #include <string> | 8 #include <string> |
9 #include <vector> | 9 #include <vector> |
10 | 10 |
11 #include "base/basictypes.h" | 11 #include "base/basictypes.h" |
12 #include "base/callback_forward.h" | 12 #include "base/callback_forward.h" |
13 #include "base/pickle.h" | 13 #include "base/pickle.h" |
14 #include "base/process/process.h" | 14 #include "base/process/process.h" |
15 #include "sandbox/linux/sandbox_export.h" | 15 #include "sandbox/sandbox_export.h" |
16 | 16 |
17 namespace sandbox { | 17 namespace sandbox { |
18 | 18 |
19 // Create a new "broker" process to which we can send requests via an IPC | 19 // Create a new "broker" process to which we can send requests via an IPC |
20 // channel. | 20 // channel. |
21 // This is a low level IPC mechanism that is suitable to be called from a | 21 // This is a low level IPC mechanism that is suitable to be called from a |
22 // signal handler. | 22 // signal handler. |
23 // A process would typically create a broker process before entering | 23 // A process would typically create a broker process before entering |
24 // sandboxing. | 24 // sandboxing. |
25 // 1. BrokerProcess open_broker(read_whitelist, write_whitelist); | 25 // 1. BrokerProcess open_broker(read_whitelist, write_whitelist); |
(...skipping 71 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
97 const std::vector<std::string> allowed_w_files_; // Files allowed for write. | 97 const std::vector<std::string> allowed_w_files_; // Files allowed for write. |
98 int ipc_socketpair_; // Our communication channel to parent or child. | 98 int ipc_socketpair_; // Our communication channel to parent or child. |
99 DISALLOW_IMPLICIT_CONSTRUCTORS(BrokerProcess); | 99 DISALLOW_IMPLICIT_CONSTRUCTORS(BrokerProcess); |
100 | 100 |
101 friend class BrokerProcessTestHelper; | 101 friend class BrokerProcessTestHelper; |
102 }; | 102 }; |
103 | 103 |
104 } // namespace sandbox | 104 } // namespace sandbox |
105 | 105 |
106 #endif // SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ | 106 #endif // SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ |
OLD | NEW |