Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(280)

Side by Side Diff: content/common/sandbox_linux/bpf_ppapi_policy_linux.cc

Issue 299683004: Rewrite all BPF policies to use DSL API Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Overhaul of DSL and implementation Created 6 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 // Copyright 2013 The Chromium Authors. All rights reserved. 1 // Copyright 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "content/common/sandbox_linux/bpf_ppapi_policy_linux.h" 5 #include "content/common/sandbox_linux/bpf_ppapi_policy_linux.h"
6 6
7 #include <errno.h> 7 #include <errno.h>
8 8
9 #include "base/basictypes.h" 9 #include "base/basictypes.h"
10 #include "build/build_config.h" 10 #include "build/build_config.h"
11 #include "content/common/sandbox_linux/sandbox_linux.h" 11 #include "content/common/sandbox_linux/sandbox_linux.h"
12 #include "sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h" 12 #include "sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h"
13 #include "sandbox/linux/seccomp-bpf-helpers/syscall_sets.h" 13 #include "sandbox/linux/seccomp-bpf-helpers/syscall_sets.h"
14 #include "sandbox/linux/seccomp-bpf/sandbox_bpf_policy.h" 14 #include "sandbox/linux/seccomp-bpf/sandbox_bpf_policy.h"
15 #include "sandbox/linux/services/linux_syscalls.h" 15 #include "sandbox/linux/services/linux_syscalls.h"
16 16
17 using namespace sandbox::bpf_dsl;
17 using sandbox::SyscallSets; 18 using sandbox::SyscallSets;
18 19
19 namespace content { 20 namespace content {
20 21
21 PpapiProcessPolicy::PpapiProcessPolicy() {} 22 PpapiProcessPolicy::PpapiProcessPolicy() {}
22 PpapiProcessPolicy::~PpapiProcessPolicy() {} 23 PpapiProcessPolicy::~PpapiProcessPolicy() {}
23 24
24 ErrorCode PpapiProcessPolicy::EvaluateSyscall(SandboxBPF* sandbox, 25 ResultExpr PpapiProcessPolicy::EvaluateSyscall(int sysno) const {
25 int sysno) const {
26 switch (sysno) { 26 switch (sysno) {
27 case __NR_pread64: 27 case __NR_pread64:
28 case __NR_pwrite64: 28 case __NR_pwrite64:
29 case __NR_sched_get_priority_max: 29 case __NR_sched_get_priority_max:
30 case __NR_sched_get_priority_min: 30 case __NR_sched_get_priority_min:
31 case __NR_sched_getaffinity: 31 case __NR_sched_getaffinity:
32 case __NR_sched_getparam: 32 case __NR_sched_getparam:
33 case __NR_sched_getscheduler: 33 case __NR_sched_getscheduler:
34 case __NR_sched_setscheduler: 34 case __NR_sched_setscheduler:
35 case __NR_times: 35 case __NR_times:
36 return ErrorCode(ErrorCode::ERR_ALLOWED); 36 return Allow();
37 case __NR_ioctl: 37 case __NR_ioctl:
38 return ErrorCode(ENOTTY); // Flash Access. 38 return Error(ENOTTY); // Flash Access.
39 default: 39 default:
40 // Default on the baseline policy. 40 // Default on the baseline policy.
41 return SandboxBPFBasePolicy::EvaluateSyscall(sandbox, sysno); 41 return SandboxBPFBasePolicy::EvaluateSyscall(sysno);
42 } 42 }
43 } 43 }
44 44
45 } // namespace content 45 } // namespace content
OLDNEW
« no previous file with comments | « content/common/sandbox_linux/bpf_ppapi_policy_linux.h ('k') | content/common/sandbox_linux/bpf_renderer_policy_linux.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698