Create a LinuxSandbox class

sandbox/linux/suid/client/setuid_sandbox_client.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <sys/types.h>
 #include <sys/wait.h>
 #include <unistd.h>
 
 #include "base/eintr_wrapper.h"
 #include "base/environment.h"
@@ skipping 85 matching lines @@
 
 SetuidSandboxClient* SetuidSandboxClient::Create() {
   base::Environment* environment(base::Environment::Create());
   SetuidSandboxClient* sandbox_client(new(SetuidSandboxClient));
 
   CHECK(environment);
   sandbox_client->env_ = environment;
   return sandbox_client;
 }
 
-SetuidSandboxClient::SetuidSandboxClient() {
-  env_ = NULL;
+SetuidSandboxClient::SetuidSandboxClient()
+    : env_(NULL),
+      sandboxed_(false) {
 }
 
 SetuidSandboxClient::~SetuidSandboxClient() {
   delete env_;
 }
 
 bool SetuidSandboxClient::ChrootMe() {
   int fd = GetIPCDescriptor(env_);
 
   if (fd < 0) {
@@ skipping 17 matching lines @@
   char reply;
   if (HANDLE_EINTR(read(fd, &reply, 1)) != 1) {
     PLOG(ERROR) << "Failed to read from chroot pipe";
     return false;
   }
 
   if (reply != kMsgChrootSuccessful) {
     LOG(ERROR) << "Error code reply from chroot helper";
     return false;
   }
+
+  // We now consider ourselves "fully sandboxed" as far as the
+  // setuid sandbox is concerned.
+  sandboxed_ = true;
   return true;
 }
 
 bool SetuidSandboxClient::IsSuidSandboxUpToDate() const {
   return GetHelperApi(env_) == kSUIDSandboxApiNumber;
 }
 
 bool SetuidSandboxClient::IsSuidSandboxChild() const {
   return GetIPCDescriptor(env_) >= 0;
 }
 
 bool SetuidSandboxClient::IsInNewPIDNamespace() const {
   return env_->HasVar(kSandboxPIDNSEnvironmentVarName);
 }
 
 bool SetuidSandboxClient::IsInNewNETNamespace() const {
   return env_->HasVar(kSandboxNETNSEnvironmentVarName);
 }
 
+bool SetuidSandboxClient::IsSandboxed() const {
+  return sandboxed_;
+}
+
 void SetuidSandboxClient::SetupLaunchEnvironment() {
   SaveSUIDUnsafeEnvironmentVariables(env_);
   SetSandboxAPIEnvironmentVariable(env_);
 }
 
 }  // namespace sandbox