Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(88)

Side by Side Diff: sandbox/linux/suid/client/setuid_sandbox_client.h

Issue 10837081: Revert 149692 - Create a LinuxSandbox class. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src/
Patch Set: Created 8 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « content/zygote/zygote_main_linux.cc ('k') | sandbox/linux/suid/client/setuid_sandbox_client.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef SANDBOX_LINUX_SUID_SETUID_SANDBOX_CLIENT_H_ 5 #ifndef SANDBOX_LINUX_SUID_SETUID_SANDBOX_CLIENT_H_
6 #define SANDBOX_LINUX_SUID_SETUID_SANDBOX_CLIENT_H_ 6 #define SANDBOX_LINUX_SUID_SETUID_SANDBOX_CLIENT_H_
7 7
8 #include "base/basictypes.h" 8 #include "base/basictypes.h"
9 9 #include "base/environment.h"
10 namespace base { class Environment; }
11 10
12 namespace sandbox { 11 namespace sandbox {
13 12
14 // Helper class to use the setuid sandbox. This class is to be used both 13 // Helper class to use the setuid sandbox. This class is to be used both
15 // before launching the setuid helper and after being executed through the 14 // before launching the setuid helper and after being executed through the
16 // setuid helper. 15 // setuid helper.
17 // 16 //
18 // A typical use would be: 17 // A typical use would be:
19 // 1. The browser calls SetupLaunchEnvironment() 18 // 1. The browser calls SetupLaunchEnvironment()
20 // 2. The browser launches a renderer through the setuid sandbox. 19 // 2. The browser launches a renderer through the setuid sandbox.
(...skipping 11 matching lines...) Expand all
32 bool ChrootMe(); 31 bool ChrootMe();
33 32
34 // Did we get launched through an up to date setuid binary ? 33 // Did we get launched through an up to date setuid binary ?
35 bool IsSuidSandboxUpToDate() const; 34 bool IsSuidSandboxUpToDate() const;
36 // Did we get launched through the setuid helper ? 35 // Did we get launched through the setuid helper ?
37 bool IsSuidSandboxChild() const; 36 bool IsSuidSandboxChild() const;
38 // Did the setuid helper create a new PID namespace ? 37 // Did the setuid helper create a new PID namespace ?
39 bool IsInNewPIDNamespace() const; 38 bool IsInNewPIDNamespace() const;
40 // Did the setuid helper create a new network namespace ? 39 // Did the setuid helper create a new network namespace ?
41 bool IsInNewNETNamespace() const; 40 bool IsInNewNETNamespace() const;
42 // Are we done and fully sandboxed ?
43 bool IsSandboxed() const;
44 41
45 // Set-up the environment. This should be done prior to launching the setuid 42 // Set-up the environment. This should be done prior to launching the setuid
46 // helper. 43 // helper.
47 void SetupLaunchEnvironment(); 44 void SetupLaunchEnvironment();
48 45
49 private: 46 private:
50 // Holds the environment. Will never be NULL. 47 // Holds the environment. Will never be NULL.
51 base::Environment* env_; 48 base::Environment* env_;
52 bool sandboxed_;
53 DISALLOW_IMPLICIT_CONSTRUCTORS(SetuidSandboxClient); 49 DISALLOW_IMPLICIT_CONSTRUCTORS(SetuidSandboxClient);
54 }; 50 };
55 51
56 } // namespace sandbox 52 } // namespace sandbox
57 53
58 #endif // SANDBOX_LINUX_SUID_SETUID_SANDBOX_CLIENT_H_ 54 #endif // SANDBOX_LINUX_SUID_SETUID_SANDBOX_CLIENT_H_
OLDNEW
« no previous file with comments | « content/zygote/zygote_main_linux.cc ('k') | sandbox/linux/suid/client/setuid_sandbox_client.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698