OLD | NEW |
1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef SANDBOX_LINUX_SERVICES_CREDENTIALS_H_ | 5 #ifndef SANDBOX_LINUX_SERVICES_CREDENTIALS_H_ |
6 #define SANDBOX_LINUX_SERVICES_CREDENTIALS_H_ | 6 #define SANDBOX_LINUX_SERVICES_CREDENTIALS_H_ |
7 | 7 |
8 #include "build/build_config.h" | 8 #include "build/build_config.h" |
9 // Link errors are tedious to track, raise a compile-time error instead. | 9 // Link errors are tedious to track, raise a compile-time error instead. |
10 #if defined(OS_ANDROID) | 10 #if defined(OS_ANDROID) |
11 #error "Android is not supported." | 11 #error "Android is not supported." |
12 #endif // defined(OS_ANDROID). | 12 #endif // defined(OS_ANDROID). |
13 | 13 |
14 #include <string> | 14 #include <string> |
15 | 15 |
16 #include "base/basictypes.h" | 16 #include "base/basictypes.h" |
17 #include "base/memory/scoped_ptr.h" | 17 #include "base/memory/scoped_ptr.h" |
18 #include "sandbox/sandbox_export.h" | 18 #include "sandbox/sandbox_export.h" |
19 | 19 |
20 namespace sandbox { | 20 namespace sandbox { |
21 | 21 |
22 // This class should be used to manipulate the current process' credentials. | 22 // This class should be used to manipulate the current process' credentials. |
23 // It is currently a stub used to manipulate POSIX.1e capabilities as | 23 // It is currently a stub used to manipulate POSIX.1e capabilities as |
24 // implemented by the Linux kernel. | 24 // implemented by the Linux kernel. |
25 class SANDBOX_EXPORT Credentials { | 25 class SANDBOX_EXPORT Credentials { |
26 public: | 26 public: |
27 Credentials(); | 27 Credentials(); |
28 ~Credentials(); | 28 ~Credentials(); |
29 | 29 |
30 // Returns the number of file descriptors in the current process's FD | |
31 // table, excluding |proc_fd|, which should be a file descriptor for | |
32 // /proc. | |
33 int CountOpenFds(int proc_fd); | |
34 | |
35 // Checks whether the current process has any directory file descriptor open. | |
36 // Directory file descriptors are "capabilities" that would let a process use | |
37 // system calls such as openat() to bypass restrictions such as | |
38 // DropFileSystemAccess(). | |
39 // Sometimes it's useful to call HasOpenDirectory() after file system access | |
40 // has been dropped. In this case, |proc_fd| should be a file descriptor to | |
41 // /proc. The file descriptor in |proc_fd| will be ignored by | |
42 // HasOpenDirectory() and remains owned by the caller. It is very important | |
43 // for the caller to close it. | |
44 // If /proc is available, |proc_fd| can be passed as -1. | |
45 // If |proc_fd| is -1 and /proc is not available, this function will return | |
46 // false. | |
47 bool HasOpenDirectory(int proc_fd); | |
48 | |
49 // Drop all capabilities in the effective, inheritable and permitted sets for | 30 // Drop all capabilities in the effective, inheritable and permitted sets for |
50 // the current process. | 31 // the current process. |
51 bool DropAllCapabilities(); | 32 bool DropAllCapabilities(); |
52 // Return true iff there is any capability in any of the capabilities sets | 33 // Return true iff there is any capability in any of the capabilities sets |
53 // of the current process. | 34 // of the current process. |
54 bool HasAnyCapability() const; | 35 bool HasAnyCapability() const; |
55 // Returns the capabilities of the current process in textual form, as | 36 // Returns the capabilities of the current process in textual form, as |
56 // documented in libcap2's cap_to_text(3). This is mostly useful for | 37 // documented in libcap2's cap_to_text(3). This is mostly useful for |
57 // debugging and tests. | 38 // debugging and tests. |
58 scoped_ptr<std::string> GetCurrentCapString() const; | 39 scoped_ptr<std::string> GetCurrentCapString() const; |
(...skipping 24 matching lines...) Expand all Loading... |
83 // process has any directory file descriptor open. | 64 // process has any directory file descriptor open. |
84 bool DropFileSystemAccess(); | 65 bool DropFileSystemAccess(); |
85 | 66 |
86 private: | 67 private: |
87 DISALLOW_COPY_AND_ASSIGN(Credentials); | 68 DISALLOW_COPY_AND_ASSIGN(Credentials); |
88 }; | 69 }; |
89 | 70 |
90 } // namespace sandbox. | 71 } // namespace sandbox. |
91 | 72 |
92 #endif // SANDBOX_LINUX_SERVICES_CREDENTIALS_H_ | 73 #endif // SANDBOX_LINUX_SERVICES_CREDENTIALS_H_ |
OLD | NEW |