Setuid sandbox API versioning

base/linux_util.h

Index: base/linux_util.h
diff --git a/base/linux_util.h b/base/linux_util.h
index 4f2808b93f5188d4318663fa6a78bb4dfac1e927..7828b67ba588293f793ad7495acd3fb0d8874c7a 100644
--- a/base/linux_util.h
+++ b/base/linux_util.h
@@ -17,6 +17,11 @@ namespace base {
 
 static const char kFindInodeSwitch[] = "--find-inode";
 
+// This should be kept in sync with sandbox/linux/suid/sandbox.c
+static const long kSUIDSandboxApiNumber = 0;
+static const char kSandboxEnvironmentApiRequest[] = "SBX_API_RQ";

[Brad Chen, 2012/06/02 15:57:03]

I'm wondering if it would be worth making these names a little bit more
self-documenting, so if somebody was groveling through setenv | less they would
know these were for Chrome. Not obvious that clarity is better in this case.

[jln (very slow on Chromium), 2012/06/04 19:26:23]

Done. I didn't change the old environment variables names though, for
compatibility reasons.

+static const char kSandboxEnvironmentApiProvides[] = "SBX_API_PRV";
+
 // This is declared here so the crash reporter can access the memory directly
 // in compromised context without going through the standard library.
 BASE_EXPORT extern char g_linux_distro[];