OLD | NEW |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_ | 5 #ifndef COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_ |
6 #define COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_ | 6 #define COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_ |
7 | 7 |
8 #include "base/basictypes.h" | 8 #include "base/basictypes.h" |
9 #include "sandbox/linux/bpf_dsl/bpf_dsl_forward.h" | 9 #include "sandbox/linux/bpf_dsl/bpf_dsl_forward.h" |
10 #include "sandbox/linux/bpf_dsl/policy.h" | 10 #include "sandbox/linux/bpf_dsl/policy.h" |
11 | 11 |
12 namespace nacl { | 12 namespace nacl { |
13 namespace nonsfi { | 13 namespace nonsfi { |
14 | 14 |
15 // The seccomp sandbox policy for NaCl non-SFI mode. Note that this | 15 // The seccomp sandbox policy for NaCl non-SFI mode. Note that this |
16 // policy must be as strong as possible, as non-SFI mode heavily | 16 // policy must be as strong as possible, as non-SFI mode heavily |
17 // depends on seccomp sandbox. | 17 // depends on seccomp sandbox. |
18 class NaClNonSfiBPFSandboxPolicy : public sandbox::bpf_dsl::Policy { | 18 class NaClNonSfiBPFSandboxPolicy : public sandbox::bpf_dsl::Policy { |
19 public: | 19 public: |
20 explicit NaClNonSfiBPFSandboxPolicy() {} | 20 explicit NaClNonSfiBPFSandboxPolicy() {} |
21 virtual ~NaClNonSfiBPFSandboxPolicy() {} | 21 ~NaClNonSfiBPFSandboxPolicy() override {} |
22 | 22 |
23 virtual sandbox::bpf_dsl::ResultExpr EvaluateSyscall( | 23 sandbox::bpf_dsl::ResultExpr EvaluateSyscall(int sysno) const override; |
24 int sysno) const override; | 24 sandbox::bpf_dsl::ResultExpr InvalidSyscall() const override; |
25 virtual sandbox::bpf_dsl::ResultExpr InvalidSyscall() const override; | |
26 | 25 |
27 private: | 26 private: |
28 DISALLOW_COPY_AND_ASSIGN(NaClNonSfiBPFSandboxPolicy); | 27 DISALLOW_COPY_AND_ASSIGN(NaClNonSfiBPFSandboxPolicy); |
29 }; | 28 }; |
30 | 29 |
31 // Initializes seccomp-bpf sandbox for non-SFI NaCl. Returns false on | 30 // Initializes seccomp-bpf sandbox for non-SFI NaCl. Returns false on |
32 // failure. | 31 // failure. |
33 bool InitializeBPFSandbox(); | 32 bool InitializeBPFSandbox(); |
34 | 33 |
35 } // namespace nonsfi | 34 } // namespace nonsfi |
36 } // namespace nacl | 35 } // namespace nacl |
37 | 36 |
38 #endif // COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_ | 37 #endif // COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_ |
OLD | NEW |