OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef SANDBOX_LINUX_SUID_SETUID_SANDBOX_CLIENT_H_ | 5 #ifndef SANDBOX_LINUX_SUID_SETUID_SANDBOX_CLIENT_H_ |
6 #define SANDBOX_LINUX_SUID_SETUID_SANDBOX_CLIENT_H_ | 6 #define SANDBOX_LINUX_SUID_SETUID_SANDBOX_CLIENT_H_ |
7 | 7 |
8 #include "base/basictypes.h" | 8 #include "base/basictypes.h" |
9 | 9 #include "base/environment.h" |
10 namespace base { class Environment; } | |
11 | 10 |
12 namespace sandbox { | 11 namespace sandbox { |
13 | 12 |
14 // Helper class to use the setuid sandbox. This class is to be used both | 13 // Helper class to use the setuid sandbox. This class is to be used both |
15 // before launching the setuid helper and after being executed through the | 14 // before launching the setuid helper and after being executed through the |
16 // setuid helper. | 15 // setuid helper. |
17 // | 16 // |
18 // A typical use would be: | 17 // A typical use would be: |
19 // 1. The browser calls SetupLaunchEnvironment() | 18 // 1. The browser calls SetupLaunchEnvironment() |
20 // 2. The browser launches a renderer through the setuid sandbox. | 19 // 2. The browser launches a renderer through the setuid sandbox. |
(...skipping 11 matching lines...) Expand all Loading... |
32 bool ChrootMe(); | 31 bool ChrootMe(); |
33 | 32 |
34 // Did we get launched through an up to date setuid binary ? | 33 // Did we get launched through an up to date setuid binary ? |
35 bool IsSuidSandboxUpToDate() const; | 34 bool IsSuidSandboxUpToDate() const; |
36 // Did we get launched through the setuid helper ? | 35 // Did we get launched through the setuid helper ? |
37 bool IsSuidSandboxChild() const; | 36 bool IsSuidSandboxChild() const; |
38 // Did the setuid helper create a new PID namespace ? | 37 // Did the setuid helper create a new PID namespace ? |
39 bool IsInNewPIDNamespace() const; | 38 bool IsInNewPIDNamespace() const; |
40 // Did the setuid helper create a new network namespace ? | 39 // Did the setuid helper create a new network namespace ? |
41 bool IsInNewNETNamespace() const; | 40 bool IsInNewNETNamespace() const; |
42 // Are we done and fully sandboxed ? | |
43 bool IsSandboxed() const; | |
44 | 41 |
45 // Set-up the environment. This should be done prior to launching the setuid | 42 // Set-up the environment. This should be done prior to launching the setuid |
46 // helper. | 43 // helper. |
47 void SetupLaunchEnvironment(); | 44 void SetupLaunchEnvironment(); |
48 | 45 |
49 private: | 46 private: |
50 // Holds the environment. Will never be NULL. | 47 // Holds the environment. Will never be NULL. |
51 base::Environment* env_; | 48 base::Environment* env_; |
52 bool sandboxed_; | |
53 DISALLOW_IMPLICIT_CONSTRUCTORS(SetuidSandboxClient); | 49 DISALLOW_IMPLICIT_CONSTRUCTORS(SetuidSandboxClient); |
54 }; | 50 }; |
55 | 51 |
56 } // namespace sandbox | 52 } // namespace sandbox |
57 | 53 |
58 #endif // SANDBOX_LINUX_SUID_SETUID_SANDBOX_CLIENT_H_ | 54 #endif // SANDBOX_LINUX_SUID_SETUID_SANDBOX_CLIENT_H_ |
OLD | NEW |