Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(257)

Side by Side Diff: sandbox/linux/services/credentials.h

Issue 761903003: Update from https://crrev.com/306655 (Closed) Base URL: git@github.com:domokit/mojo.git@master
Patch Set: Created 6 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef SANDBOX_LINUX_SERVICES_CREDENTIALS_H_ 5 #ifndef SANDBOX_LINUX_SERVICES_CREDENTIALS_H_
6 #define SANDBOX_LINUX_SERVICES_CREDENTIALS_H_ 6 #define SANDBOX_LINUX_SERVICES_CREDENTIALS_H_
7 7
8 #include "build/build_config.h" 8 #include "build/build_config.h"
9 // Link errors are tedious to track, raise a compile-time error instead. 9 // Link errors are tedious to track, raise a compile-time error instead.
10 #if defined(OS_ANDROID) 10 #if defined(OS_ANDROID)
11 #error "Android is not supported." 11 #error "Android is not supported."
12 #endif // defined(OS_ANDROID). 12 #endif // defined(OS_ANDROID).
13 13
14 #include <string> 14 #include <string>
15 15
16 #include "base/basictypes.h" 16 #include "base/basictypes.h"
17 #include "base/memory/scoped_ptr.h" 17 #include "base/memory/scoped_ptr.h"
18 #include "sandbox/sandbox_export.h" 18 #include "sandbox/sandbox_export.h"
19 19
20 namespace sandbox { 20 namespace sandbox {
21 21
22 // This class should be used to manipulate the current process' credentials. 22 // This class should be used to manipulate the current process' credentials.
23 // It is currently a stub used to manipulate POSIX.1e capabilities as 23 // It is currently a stub used to manipulate POSIX.1e capabilities as
24 // implemented by the Linux kernel. 24 // implemented by the Linux kernel.
25 class SANDBOX_EXPORT Credentials { 25 class SANDBOX_EXPORT Credentials {
26 public: 26 public:
27 Credentials(); 27 Credentials();
28 ~Credentials(); 28 ~Credentials();
29 29
30 // Returns the number of file descriptors in the current process's FD
31 // table, excluding |proc_fd|, which should be a file descriptor for
32 // /proc.
33 int CountOpenFds(int proc_fd);
34
35 // Checks whether the current process has any directory file descriptor open.
36 // Directory file descriptors are "capabilities" that would let a process use
37 // system calls such as openat() to bypass restrictions such as
38 // DropFileSystemAccess().
39 // Sometimes it's useful to call HasOpenDirectory() after file system access
40 // has been dropped. In this case, |proc_fd| should be a file descriptor to
41 // /proc. The file descriptor in |proc_fd| will be ignored by
42 // HasOpenDirectory() and remains owned by the caller. It is very important
43 // for the caller to close it.
44 // If /proc is available, |proc_fd| can be passed as -1.
45 // If |proc_fd| is -1 and /proc is not available, this function will return
46 // false.
47 bool HasOpenDirectory(int proc_fd);
48
49 // Drop all capabilities in the effective, inheritable and permitted sets for 30 // Drop all capabilities in the effective, inheritable and permitted sets for
50 // the current process. 31 // the current process.
51 bool DropAllCapabilities(); 32 bool DropAllCapabilities();
52 // Return true iff there is any capability in any of the capabilities sets 33 // Return true iff there is any capability in any of the capabilities sets
53 // of the current process. 34 // of the current process.
54 bool HasAnyCapability() const; 35 bool HasAnyCapability() const;
55 // Returns the capabilities of the current process in textual form, as 36 // Returns the capabilities of the current process in textual form, as
56 // documented in libcap2's cap_to_text(3). This is mostly useful for 37 // documented in libcap2's cap_to_text(3). This is mostly useful for
57 // debugging and tests. 38 // debugging and tests.
58 scoped_ptr<std::string> GetCurrentCapString() const; 39 scoped_ptr<std::string> GetCurrentCapString() const;
(...skipping 24 matching lines...) Expand all
83 // process has any directory file descriptor open. 64 // process has any directory file descriptor open.
84 bool DropFileSystemAccess(); 65 bool DropFileSystemAccess();
85 66
86 private: 67 private:
87 DISALLOW_COPY_AND_ASSIGN(Credentials); 68 DISALLOW_COPY_AND_ASSIGN(Credentials);
88 }; 69 };
89 70
90 } // namespace sandbox. 71 } // namespace sandbox.
91 72
92 #endif // SANDBOX_LINUX_SERVICES_CREDENTIALS_H_ 73 #endif // SANDBOX_LINUX_SERVICES_CREDENTIALS_H_
OLDNEW
« no previous file with comments | « sandbox/linux/seccomp-bpf/sandbox_bpf_unittest.cc ('k') | sandbox/linux/services/credentials.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698