Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(210)

Side by Side Diff: sandbox/linux/seccomp-bpf/sandbox_bpf_policy.h

Issue 101773003: Linux sandbox: cleanup sandbox-bpf naming. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Address namespace sandbox nits. Created 7 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 // Copyright 2013 The Chromium Authors. All rights reserved. 1 // Copyright 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef SANDBOX_LINUX_SECCOMP_BPF_SANDBOX_BPF_POLICY_H_ 5 #ifndef SANDBOX_LINUX_SECCOMP_BPF_SANDBOX_BPF_POLICY_H_
6 #define SANDBOX_LINUX_SECCOMP_BPF_SANDBOX_BPF_POLICY_H_ 6 #define SANDBOX_LINUX_SECCOMP_BPF_SANDBOX_BPF_POLICY_H_
7 7
8 #include "base/basictypes.h" 8 #include "base/basictypes.h"
9 9
10 namespace playground2 { 10 namespace sandbox {
11 11
12 class ErrorCode; 12 class ErrorCode;
13 class Sandbox; 13 class SandboxBPF;
14 14
15 // This is the interface to implement to define a BPF sandbox policy. 15 // This is the interface to implement to define a BPF sandbox policy.
16 class SandboxBpfPolicy { 16 class SandboxBPFPolicy {
17 public: 17 public:
18 SandboxBpfPolicy() {} 18 SandboxBPFPolicy() {}
19 virtual ~SandboxBpfPolicy() {} 19 virtual ~SandboxBPFPolicy() {}
20 20
21 // The EvaluateSyscall method is called with the system call number. It can 21 // The EvaluateSyscall method is called with the system call number. It can
22 // decide to allow the system call unconditionally by returning ERR_ALLOWED; 22 // decide to allow the system call unconditionally by returning ERR_ALLOWED;
23 // it can deny the system call unconditionally by returning an appropriate 23 // it can deny the system call unconditionally by returning an appropriate
24 // "errno" value; or it can request inspection of system call argument(s) by 24 // "errno" value; or it can request inspection of system call argument(s) by
25 // returning a suitable ErrorCode. 25 // returning a suitable ErrorCode.
26 virtual ErrorCode EvaluateSyscall(Sandbox* sandbox_compiler, 26 virtual ErrorCode EvaluateSyscall(SandboxBPF* sandbox_compiler,
27 int system_call_number) const = 0; 27 int system_call_number) const = 0;
28 28
29 private: 29 private:
30 DISALLOW_COPY_AND_ASSIGN(SandboxBpfPolicy); 30 DISALLOW_COPY_AND_ASSIGN(SandboxBPFPolicy);
31 }; 31 };
32 32
33 } // namespace playground2 33 } // namespace sandbox
34 34
35 #endif // SANDBOX_LINUX_SECCOMP_BPF_SANDBOX_BPF_POLICY_H_ 35 #endif // SANDBOX_LINUX_SECCOMP_BPF_SANDBOX_BPF_POLICY_H_
OLDNEW
« no previous file with comments | « sandbox/linux/seccomp-bpf/sandbox_bpf.cc ('k') | sandbox/linux/seccomp-bpf/sandbox_bpf_unittest.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698