OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "content/common/sandbox_mac.h" | 5 #include "content/common/sandbox_mac.h" |
6 | 6 |
7 #import <Cocoa/Cocoa.h> | 7 #import <Cocoa/Cocoa.h> |
8 | 8 |
9 #include <CoreFoundation/CFTimeZone.h> | 9 #include <CoreFoundation/CFTimeZone.h> |
10 extern "C" { | 10 extern "C" { |
(...skipping 96 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
107 DLOG(FATAL) << "String quoting failed " << bad_string; | 107 DLOG(FATAL) << "String quoting failed " << bad_string; |
108 } | 108 } |
109 | 109 |
110 } // namespace | 110 } // namespace |
111 | 111 |
112 // static | 112 // static |
113 NSString* Sandbox::AllowMetadataForPath(const base::FilePath& allowed_path) { | 113 NSString* Sandbox::AllowMetadataForPath(const base::FilePath& allowed_path) { |
114 // Collect a list of all parent directories. | 114 // Collect a list of all parent directories. |
115 base::FilePath last_path = allowed_path; | 115 base::FilePath last_path = allowed_path; |
116 std::vector<base::FilePath> subpaths; | 116 std::vector<base::FilePath> subpaths; |
117 | 117 for (base::FilePath path = allowed_path; |
118 base::FilePath path = allowed_path; | 118 path.value() != last_path.value(); |
119 do { | 119 path = path.DirName()) { |
120 subpaths.push_back(path); | 120 subpaths.push_back(path); |
121 | |
122 last_path = path; | 121 last_path = path; |
123 path = path.DirName(); | 122 } |
124 } while (path.value() != last_path.value()); | |
125 | 123 |
126 // Iterate through all parents and allow stat() on them explicitly. | 124 // Iterate through all parents and allow stat() on them explicitly. |
127 NSString* sandbox_command = @"(allow file-read-metadata "; | 125 NSString* sandbox_command = @"(allow file-read-metadata "; |
128 for (std::vector<base::FilePath>::reverse_iterator i = subpaths.rbegin(); | 126 for (std::vector<base::FilePath>::reverse_iterator i = subpaths.rbegin(); |
129 i != subpaths.rend(); | 127 i != subpaths.rend(); |
130 ++i) { | 128 ++i) { |
131 std::string subdir_escaped; | 129 std::string subdir_escaped; |
132 if (!QuotePlainString(i->value(), &subdir_escaped)) { | 130 if (!QuotePlainString(i->value(), &subdir_escaped)) { |
133 FatalStringQuoteException(i->value()); | 131 FatalStringQuoteException(i->value()); |
134 return nil; | 132 return nil; |
(...skipping 481 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
616 if (HANDLE_EINTR(fcntl(fd.get(), F_GETPATH, canonical_path)) != 0) { | 614 if (HANDLE_EINTR(fcntl(fd.get(), F_GETPATH, canonical_path)) != 0) { |
617 DPLOG(FATAL) << "GetCanonicalSandboxPath() failed for: " | 615 DPLOG(FATAL) << "GetCanonicalSandboxPath() failed for: " |
618 << path.value(); | 616 << path.value(); |
619 return path; | 617 return path; |
620 } | 618 } |
621 | 619 |
622 return base::FilePath(canonical_path); | 620 return base::FilePath(canonical_path); |
623 } | 621 } |
624 | 622 |
625 } // namespace content | 623 } // namespace content |
OLD | NEW |