| OLD | NEW |
| 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "content/common/sandbox_linux/bpf_gpu_policy_linux.h" | 5 #include "content/common/sandbox_linux/bpf_gpu_policy_linux.h" |
| 6 | 6 |
| 7 #include <dlfcn.h> | 7 #include <dlfcn.h> |
| 8 #include <errno.h> | 8 #include <errno.h> |
| 9 #include <fcntl.h> | 9 #include <fcntl.h> |
| 10 #include <sys/socket.h> | 10 #include <sys/socket.h> |
| 11 #include <sys/stat.h> | 11 #include <sys/stat.h> |
| 12 #include <sys/types.h> | 12 #include <sys/types.h> |
| 13 #include <unistd.h> | 13 #include <unistd.h> |
| 14 | 14 |
| 15 #include <string> | 15 #include <string> |
| 16 #include <vector> | 16 #include <vector> |
| 17 | 17 |
| 18 #include "base/bind.h" | 18 #include "base/bind.h" |
| 19 #include "base/command_line.h" | 19 #include "base/command_line.h" |
| 20 #include "base/compiler_specific.h" | 20 #include "base/compiler_specific.h" |
| 21 #include "base/logging.h" | 21 #include "base/logging.h" |
| 22 #include "base/memory/scoped_ptr.h" | 22 #include "base/memory/scoped_ptr.h" |
| 23 #include "build/build_config.h" | 23 #include "build/build_config.h" |
| 24 #include "content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h" | 24 #include "content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h" |
| 25 #include "content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h" | 25 #include "content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h" |
| 26 #include "content/common/set_process_title.h" | 26 #include "content/common/set_process_title.h" |
| 27 #include "content/public/common/content_switches.h" | 27 #include "content/public/common/content_switches.h" |
| 28 #include "sandbox/linux/seccomp-bpf-helpers/syscall_sets.h" | 28 #include "sandbox/linux/seccomp-bpf-helpers/syscall_sets.h" |
| 29 #include "sandbox/linux/seccomp-bpf/sandbox_bpf.h" // for arch_seccomp_data | 29 #include "sandbox/linux/seccomp-bpf/trap.h" |
| 30 #include "sandbox/linux/services/broker_process.h" | 30 #include "sandbox/linux/services/broker_process.h" |
| 31 #include "sandbox/linux/services/linux_syscalls.h" | 31 #include "sandbox/linux/services/linux_syscalls.h" |
| 32 | 32 |
| 33 using sandbox::BrokerProcess; | 33 using sandbox::BrokerProcess; |
| 34 using sandbox::SyscallSets; | 34 using sandbox::SyscallSets; |
| 35 using sandbox::arch_seccomp_data; | 35 using sandbox::arch_seccomp_data; |
| 36 using sandbox::bpf_dsl::Allow; | 36 using sandbox::bpf_dsl::Allow; |
| 37 using sandbox::bpf_dsl::ResultExpr; | 37 using sandbox::bpf_dsl::ResultExpr; |
| 38 | 38 |
| 39 namespace content { | 39 namespace content { |
| (...skipping 227 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 267 broker_process_ = new BrokerProcess(GetFSDeniedErrno(), | 267 broker_process_ = new BrokerProcess(GetFSDeniedErrno(), |
| 268 read_whitelist, | 268 read_whitelist, |
| 269 write_whitelist); | 269 write_whitelist); |
| 270 // The initialization callback will perform generic initialization and then | 270 // The initialization callback will perform generic initialization and then |
| 271 // call broker_sandboxer_callback. | 271 // call broker_sandboxer_callback. |
| 272 CHECK(broker_process_->Init(base::Bind(&UpdateProcessTypeAndEnableSandbox, | 272 CHECK(broker_process_->Init(base::Bind(&UpdateProcessTypeAndEnableSandbox, |
| 273 broker_sandboxer_allocator))); | 273 broker_sandboxer_allocator))); |
| 274 } | 274 } |
| 275 | 275 |
| 276 } // namespace content | 276 } // namespace content |
| OLD | NEW |