| Index: sandbox/linux/seccomp-bpf-helpers/baseline_policy.h
|
| diff --git a/sandbox/linux/seccomp-bpf-helpers/baseline_policy.h b/sandbox/linux/seccomp-bpf-helpers/baseline_policy.h
|
| index 88dd9dc40b41133f84ef6e42383f6c21211d9d72..52f9f4dfb0a4ec5c6cb11a8c8c886c338ad13458 100644
|
| --- a/sandbox/linux/seccomp-bpf-helpers/baseline_policy.h
|
| +++ b/sandbox/linux/seccomp-bpf-helpers/baseline_policy.h
|
| @@ -8,27 +8,21 @@
|
| #include "sandbox/linux/seccomp-bpf/errorcode.h"
|
| #include "sandbox/linux/seccomp-bpf/sandbox_bpf_policy.h"
|
|
|
| -namespace playground2 {
|
| -class Sandbox;
|
| -class SandboxBpfPolicy;
|
| -}
|
| -
|
| -using playground2::ErrorCode;
|
| -using playground2::Sandbox;
|
| -using playground2::SandboxBpfPolicy;
|
| -
|
| namespace sandbox {
|
|
|
| +class SandboxBPF;
|
| +class SandboxBPFPolicy;
|
| +
|
| // This is a helper to build seccomp-bpf policies, i.e. policies for a sandbox
|
| // that reduces the Linux kernel's attack surface. Given its nature, it doesn't
|
| // have a clear semantics and is mostly "implementation-defined".
|
| //
|
| -// This returns an object that implements the SandboxBpfPolicy interface with
|
| +// This returns an object that implements the SandboxBPFPolicy interface with
|
| // a "baseline" policy within Chromium.
|
| // The "baseline" policy is somewhat arbitrary. All Chromium policies are an
|
| // alteration of it, and it represents a reasonable common ground to run most
|
| // code in a sandboxed environment.
|
| -class BaselinePolicy : public SandboxBpfPolicy {
|
| +class BaselinePolicy : public SandboxBPFPolicy {
|
| public:
|
| BaselinePolicy();
|
| // |fs_denied_errno| is the errno returned when a filesystem access system
|
| @@ -36,11 +30,11 @@ class BaselinePolicy : public SandboxBpfPolicy {
|
| explicit BaselinePolicy(int fs_denied_errno);
|
| virtual ~BaselinePolicy();
|
|
|
| - virtual ErrorCode EvaluateSyscall(Sandbox* sandbox_compiler,
|
| + virtual ErrorCode EvaluateSyscall(SandboxBPF* sandbox_compiler,
|
| int system_call_number) const OVERRIDE;
|
| // TODO(jln): remove once NaCl uses the new policy format. Do not use in new
|
| // code. This is the same as EvaluateSyscall. |aux| must be NULL.
|
| - static ErrorCode BaselinePolicyDeprecated(Sandbox* sandbox,
|
| + static ErrorCode BaselinePolicyDeprecated(SandboxBPF* sandbox,
|
| int sysno,
|
| void* aux);
|
|
|
|
|