Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(248)

Unified Diff: sandbox/linux/seccomp/access.cc

Issue 371047: Allow the seccomp sandbox to be enabled, even if the suid sandbox has... (Closed) Base URL: svn://chrome-svn/chrome/trunk/src/
Patch Set: '' Created 11 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « chrome/renderer/renderer_main_platform_delegate_linux.cc ('k') | sandbox/linux/seccomp/clone.cc » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: sandbox/linux/seccomp/access.cc
===================================================================
--- sandbox/linux/seccomp/access.cc (revision 31339)
+++ sandbox/linux/seccomp/access.cc (working copy)
@@ -29,7 +29,7 @@
return static_cast<int>(rc);
}
-bool Sandbox::process_access(int parentProc, int sandboxFd, int threadFdPub,
+bool Sandbox::process_access(int parentMapsFd, int sandboxFd, int threadFdPub,
int threadFd, SecureMem::Args* mem) {
// Read request
SysCalls sys;
@@ -56,7 +56,7 @@
}
return false;
}
- SecureMem::lockSystemCall(parentProc, mem);
+ SecureMem::lockSystemCall(parentMapsFd, mem);
if (read(sys, sandboxFd, mem->pathname, access_req.path_length) !=
(ssize_t)access_req.path_length) {
goto read_parm_failed;
@@ -68,7 +68,7 @@
"\"").c_str());
// Tell trusted thread to access the file.
- SecureMem::sendSystemCall(threadFdPub, true, parentProc, mem, __NR_access,
+ SecureMem::sendSystemCall(threadFdPub, true, parentMapsFd, mem, __NR_access,
mem->pathname - (char*)mem + (char*)mem->self,
access_req.mode);
return true;
Property changes on: sandbox/linux/seccomp/access.cc
___________________________________________________________________
Added: svn:eol-style
+ LF
« no previous file with comments | « chrome/renderer/renderer_main_platform_delegate_linux.cc ('k') | sandbox/linux/seccomp/clone.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698