Index: sandbox/linux/services/namespace_utils.h |
diff --git a/sandbox/linux/services/namespace_utils.h b/sandbox/linux/services/namespace_utils.h |
new file mode 100644 |
index 0000000000000000000000000000000000000000..8b4668a1627c65a37dce1c24e24acb76e5943942 |
--- /dev/null |
+++ b/sandbox/linux/services/namespace_utils.h |
@@ -0,0 +1,37 @@ |
+// Copyright (c) 2014 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#ifndef SANDBOX_LINUX_SERVICES_NAMESPACE_UTILS_H_ |
+#define SANDBOX_LINUX_SERVICES_NAMESPACE_UTILS_H_ |
+ |
+#include <sys/types.h> |
+ |
+#include "base/macros.h" |
+#include "base/template_util.h" |
+#include "sandbox/sandbox_export.h" |
+ |
+namespace sandbox { |
+ |
+class SANDBOX_EXPORT NamespaceUtils { |
+ public: |
+ COMPILE_ASSERT((base::is_same<uid_t, gid_t>::value), UidAndGidAreSameType); |
+ // generic_id_t can be used for either uid_t or gid_t. |
+ typedef uid_t generic_id_t; |
+ |
+ // Write a uid or gid mapping from |id| to |id| in |map_file|. |
+ static bool WriteToIdMapFile(const char* map_file, generic_id_t id); |
+ |
+ // Returns true if the namespace type |type| is supported. |type| must be one |
+ // of CLONE_NEWIPC, CLONE_NEWNET, CLONE_NEWNS, CLONE_NEWPID, CLONE_NEWUSER, or |
+ // CLONE_NEWUTS. This relies on access to /proc, so it will not work from |
+ // within a chroot. |
+ static bool SupportsLinuxNamespace(int type); |
+ |
+ private: |
+ DISALLOW_IMPLICIT_CONSTRUCTORS(NamespaceUtils); |
+}; |
+ |
+} // namespace sandbox |
+ |
+#endif // SANDBOX_LINUX_SERVICES_NAMESPACE_UTILS_H_ |