Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(36)

Side by Side Diff: sandbox/linux/syscall_broker/broker_process.h

Issue 701443004: Linux sandbox: change the return type of HandleRequest (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 6 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ 5 #ifndef SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_
6 #define SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ 6 #define SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_
7 7
8 #include <string> 8 #include <string>
9 #include <vector> 9 #include <vector>
10 10
11 #include "base/basictypes.h" 11 #include "base/basictypes.h"
12 #include "base/callback_forward.h" 12 #include "base/callback_forward.h"
13 #include "base/memory/scoped_ptr.h" 13 #include "base/memory/scoped_ptr.h"
14 #include "base/pickle.h" 14 #include "base/pickle.h"
15 #include "base/process/process.h" 15 #include "base/process/process.h"
16 #include "sandbox/linux/syscall_broker/broker_policy.h" 16 #include "sandbox/linux/syscall_broker/broker_policy.h"
17 #include "sandbox/sandbox_export.h" 17 #include "sandbox/sandbox_export.h"
18 18
19 namespace sandbox { 19 namespace sandbox {
20 20
21 namespace syscall_broker { 21 namespace syscall_broker {
22
22 class BrokerClient; 23 class BrokerClient;
23 }
24 24
25 // Create a new "broker" process to which we can send requests via an IPC 25 // Create a new "broker" process to which we can send requests via an IPC
26 // channel by forking the current process. 26 // channel by forking the current process.
27 // This is a low level IPC mechanism that is suitable to be called from a 27 // This is a low level IPC mechanism that is suitable to be called from a
28 // signal handler. 28 // signal handler.
29 // A process would typically create a broker process before entering 29 // A process would typically create a broker process before entering
30 // sandboxing. 30 // sandboxing.
31 // 1. BrokerProcess open_broker(read_whitelist, write_whitelist); 31 // 1. BrokerProcess open_broker(read_whitelist, write_whitelist);
32 // 2. CHECK(open_broker.Init(NULL)); 32 // 2. CHECK(open_broker.Init(NULL));
33 // 3. Enable sandbox. 33 // 3. Enable sandbox.
(...skipping 42 matching lines...) Expand 10 before | Expand all | Expand 10 after
76 syscall_broker::BrokerPolicy policy_; // The sandboxing policy. 76 syscall_broker::BrokerPolicy policy_; // The sandboxing policy.
77 scoped_ptr<syscall_broker::BrokerClient> 77 scoped_ptr<syscall_broker::BrokerClient>
78 broker_client_; // Can only exist if is_child_ is true. 78 broker_client_; // Can only exist if is_child_ is true.
79 79
80 int ipc_socketpair_; // Our communication channel to parent or child. 80 int ipc_socketpair_; // Our communication channel to parent or child.
81 DISALLOW_COPY_AND_ASSIGN(BrokerProcess); 81 DISALLOW_COPY_AND_ASSIGN(BrokerProcess);
82 82
83 friend class BrokerProcessTestHelper; 83 friend class BrokerProcessTestHelper;
84 }; 84 };
85 85
86 } // namespace syscall_broker
87
86 } // namespace sandbox 88 } // namespace sandbox
87 89
88 #endif // SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_ 90 #endif // SANDBOX_LINUX_SERVICES_BROKER_PROCESS_H_
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698