Linux: add a Credentials class to handle Linux capabilities.

Linux: add a Credentials class to handle Linux capabilities.

BUG=312380
R=jorgelo@chromium.org

Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=232280

[jln (very slow on Chromium), 2013-10-31 01:11:54]

Jorge: please, take a look!

(This needs to wait until the infrastructure is updated with libcap-dev until
this can be committed.)

[Jorge Lucangeli Obes, 2013-10-31 20:55:32]

https://codereview.chromium.org/51113009/diff/1/sandbox/linux/services/creden...
File sandbox/linux/services/credentials.h (right):

https://codereview.chromium.org/51113009/diff/1/sandbox/linux/services/creden...
sandbox/linux/services/credentials.h:34: bool HasAnyCapability();
Does your PoC use the API like this? Seems like a weird way to query.

[jln (very slow on Chromium), 2013-10-31 21:02:22]

https://codereview.chromium.org/51113009/diff/1/sandbox/linux/services/creden...
File sandbox/linux/services/credentials.h (right):

https://codereview.chromium.org/51113009/diff/1/sandbox/linux/services/creden...
sandbox/linux/services/credentials.h:34: bool HasAnyCapability();
On 2013/10/31 20:55:32, Jorge Lucangeli Obes wrote:
> Does your PoC use the API like this? Seems like a weird way to query.

Ohh, this is mostly for CHECK / DCHECK. The API as-is here is indeed not very
useful.

I wanted to land something small first to use libcap and deal with the fallout
of that. I'll send other cls soon.

(So far libcap still doesn't work on the bots, crbug.com/312572).

[Jorge Lucangeli Obes, 2013-10-31 21:04:30]

On 2013/10/31 21:02:22, jln wrote:
>
https://codereview.chromium.org/51113009/diff/1/sandbox/linux/services/creden...
> File sandbox/linux/services/credentials.h (right):
> 
>
https://codereview.chromium.org/51113009/diff/1/sandbox/linux/services/creden...
> sandbox/linux/services/credentials.h:34: bool HasAnyCapability();
> On 2013/10/31 20:55:32, Jorge Lucangeli Obes wrote:
> > Does your PoC use the API like this? Seems like a weird way to query.
> 
> Ohh, this is mostly for CHECK / DCHECK. The API as-is here is indeed not very
> useful.
> 
> I wanted to land something small first to use libcap and deal with the fallout
> of that. I'll send other cls soon.
> 
> (So far libcap still doesn't work on the bots, crbug.com/312572).

lgtm.

[jln (very slow on Chromium), 2013-11-01 02:33:39]

Committed patchset #2 manually as r232280.

[jln (very slow on Chromium), 2013-11-01 02:56:27]

Broke a bunch of bots that still didn't have libcap-dev, reverted :(