OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "sandbox/linux/seccomp-bpf/sandbox_bpf.h" | 5 #include "sandbox/linux/seccomp-bpf/sandbox_bpf.h" |
6 | 6 |
7 // Some headers on Android are missing cdefs: crbug.com/172337. | 7 // Some headers on Android are missing cdefs: crbug.com/172337. |
8 // (We can't use OS_ANDROID here since build_config.h is not included). | 8 // (We can't use OS_ANDROID here since build_config.h is not included). |
9 #if defined(ANDROID) | 9 #if defined(ANDROID) |
10 #include <sys/cdefs.h> | 10 #include <sys/cdefs.h> |
(...skipping 16 matching lines...) Expand all Loading... |
27 #include "sandbox/linux/bpf_dsl/dump_bpf.h" | 27 #include "sandbox/linux/bpf_dsl/dump_bpf.h" |
28 #include "sandbox/linux/bpf_dsl/policy.h" | 28 #include "sandbox/linux/bpf_dsl/policy.h" |
29 #include "sandbox/linux/bpf_dsl/policy_compiler.h" | 29 #include "sandbox/linux/bpf_dsl/policy_compiler.h" |
30 #include "sandbox/linux/bpf_dsl/syscall_set.h" | 30 #include "sandbox/linux/bpf_dsl/syscall_set.h" |
31 #include "sandbox/linux/seccomp-bpf/die.h" | 31 #include "sandbox/linux/seccomp-bpf/die.h" |
32 #include "sandbox/linux/seccomp-bpf/errorcode.h" | 32 #include "sandbox/linux/seccomp-bpf/errorcode.h" |
33 #include "sandbox/linux/seccomp-bpf/linux_seccomp.h" | 33 #include "sandbox/linux/seccomp-bpf/linux_seccomp.h" |
34 #include "sandbox/linux/seccomp-bpf/syscall.h" | 34 #include "sandbox/linux/seccomp-bpf/syscall.h" |
35 #include "sandbox/linux/seccomp-bpf/trap.h" | 35 #include "sandbox/linux/seccomp-bpf/trap.h" |
36 #include "sandbox/linux/seccomp-bpf/verifier.h" | 36 #include "sandbox/linux/seccomp-bpf/verifier.h" |
37 #include "sandbox/linux/services/linux_syscalls.h" | |
38 #include "sandbox/linux/services/syscall_wrappers.h" | 37 #include "sandbox/linux/services/syscall_wrappers.h" |
39 #include "sandbox/linux/services/thread_helpers.h" | 38 #include "sandbox/linux/services/thread_helpers.h" |
| 39 #include "sandbox/linux/system_headers/linux_syscalls.h" |
40 | 40 |
41 namespace sandbox { | 41 namespace sandbox { |
42 | 42 |
43 namespace { | 43 namespace { |
44 | 44 |
45 bool IsRunningOnValgrind() { return RUNNING_ON_VALGRIND; } | 45 bool IsRunningOnValgrind() { return RUNNING_ON_VALGRIND; } |
46 | 46 |
47 bool IsSingleThreaded(int proc_task_fd) { | 47 bool IsSingleThreaded(int proc_task_fd) { |
48 return ThreadHelpers::IsSingleThreaded(proc_task_fd); | 48 return ThreadHelpers::IsSingleThreaded(proc_task_fd); |
49 } | 49 } |
(...skipping 191 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
241 } else { | 241 } else { |
242 if (prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog)) { | 242 if (prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog)) { |
243 SANDBOX_DIE("Kernel refuses to turn on BPF filters"); | 243 SANDBOX_DIE("Kernel refuses to turn on BPF filters"); |
244 } | 244 } |
245 } | 245 } |
246 | 246 |
247 sandbox_has_started_ = true; | 247 sandbox_has_started_ = true; |
248 } | 248 } |
249 | 249 |
250 } // namespace sandbox | 250 } // namespace sandbox |
OLD | NEW |