Index: sandbox/linux/seccomp-bpf-helpers/baseline_policy.h |
diff --git a/sandbox/linux/seccomp-bpf-helpers/baseline_policy.h b/sandbox/linux/seccomp-bpf-helpers/baseline_policy.h |
index 88dd9dc40b41133f84ef6e42383f6c21211d9d72..52f9f4dfb0a4ec5c6cb11a8c8c886c338ad13458 100644 |
--- a/sandbox/linux/seccomp-bpf-helpers/baseline_policy.h |
+++ b/sandbox/linux/seccomp-bpf-helpers/baseline_policy.h |
@@ -8,27 +8,21 @@ |
#include "sandbox/linux/seccomp-bpf/errorcode.h" |
#include "sandbox/linux/seccomp-bpf/sandbox_bpf_policy.h" |
-namespace playground2 { |
-class Sandbox; |
-class SandboxBpfPolicy; |
-} |
- |
-using playground2::ErrorCode; |
-using playground2::Sandbox; |
-using playground2::SandboxBpfPolicy; |
- |
namespace sandbox { |
+class SandboxBPF; |
+class SandboxBPFPolicy; |
+ |
// This is a helper to build seccomp-bpf policies, i.e. policies for a sandbox |
// that reduces the Linux kernel's attack surface. Given its nature, it doesn't |
// have a clear semantics and is mostly "implementation-defined". |
// |
-// This returns an object that implements the SandboxBpfPolicy interface with |
+// This returns an object that implements the SandboxBPFPolicy interface with |
// a "baseline" policy within Chromium. |
// The "baseline" policy is somewhat arbitrary. All Chromium policies are an |
// alteration of it, and it represents a reasonable common ground to run most |
// code in a sandboxed environment. |
-class BaselinePolicy : public SandboxBpfPolicy { |
+class BaselinePolicy : public SandboxBPFPolicy { |
public: |
BaselinePolicy(); |
// |fs_denied_errno| is the errno returned when a filesystem access system |
@@ -36,11 +30,11 @@ class BaselinePolicy : public SandboxBpfPolicy { |
explicit BaselinePolicy(int fs_denied_errno); |
virtual ~BaselinePolicy(); |
- virtual ErrorCode EvaluateSyscall(Sandbox* sandbox_compiler, |
+ virtual ErrorCode EvaluateSyscall(SandboxBPF* sandbox_compiler, |
int system_call_number) const OVERRIDE; |
// TODO(jln): remove once NaCl uses the new policy format. Do not use in new |
// code. This is the same as EvaluateSyscall. |aux| must be NULL. |
- static ErrorCode BaselinePolicyDeprecated(Sandbox* sandbox, |
+ static ErrorCode BaselinePolicyDeprecated(SandboxBPF* sandbox, |
int sysno, |
void* aux); |