Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(162)

Side by Side Diff: content/renderer/renderer_main_platform_delegate_android.cc

Issue 759403002: Add --enable-seccomp-filter-sandbox to about:flags on Android. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Rebase Created 6 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « content/public/common/content_switches.h ('k') | tools/metrics/histograms/histograms.xml » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "content/renderer/renderer_main_platform_delegate.h" 5 #include "content/renderer/renderer_main_platform_delegate.h"
6 6
7 #include "base/command_line.h" 7 #include "base/command_line.h"
8 #include "base/logging.h" 8 #include "base/logging.h"
9 #include "content/public/common/content_switches.h" 9 #include "content/public/common/content_switches.h"
10 10
(...skipping 17 matching lines...) Expand all
28 28
29 void RendererMainPlatformDelegate::PlatformUninitialize() { 29 void RendererMainPlatformDelegate::PlatformUninitialize() {
30 } 30 }
31 31
32 bool RendererMainPlatformDelegate::EnableSandbox() { 32 bool RendererMainPlatformDelegate::EnableSandbox() {
33 #ifdef USE_SECCOMP_BPF 33 #ifdef USE_SECCOMP_BPF
34 if (!base::CommandLine::ForCurrentProcess()->HasSwitch( 34 if (!base::CommandLine::ForCurrentProcess()->HasSwitch(
35 switches::kEnableSeccompFilterSandbox)) { 35 switches::kEnableSeccompFilterSandbox)) {
36 return true; 36 return true;
37 } 37 }
38 if (!sandbox::SandboxBPF::SupportsSeccompSandbox(
39 sandbox::SandboxBPF::SeccompLevel::MULTI_THREADED)) {
40 LOG(WARNING) << "Seccomp-BPF sandbox enabled without kernel support. "
41 << "Ignoring flag and proceeding without seccomp sandbox.";
42 return true;
43 }
38 44
39 sandbox::SandboxBPF sandbox(new SandboxBPFBasePolicyAndroid()); 45 sandbox::SandboxBPF sandbox(new SandboxBPFBasePolicyAndroid());
40 CHECK( 46 CHECK(
41 sandbox.StartSandbox(sandbox::SandboxBPF::SeccompLevel::MULTI_THREADED)); 47 sandbox.StartSandbox(sandbox::SandboxBPF::SeccompLevel::MULTI_THREADED));
42 #endif 48 #endif
43 return true; 49 return true;
44 } 50 }
45 51
46 } // namespace content 52 } // namespace content
OLDNEW
« no previous file with comments | « content/public/common/content_switches.h ('k') | tools/metrics/histograms/histograms.xml » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698