Create a class for seccomp-bpf sandboxing in content.

content/common/sandbox_linux.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_COMMON_SANDBOX_LINUX_H_
 #define CONTENT_COMMON_SANDBOX_LINUX_H_
 
+#include <string>
+
+#include "base/basictypes.h"
 #include "base/memory/scoped_ptr.h"
 #include "content/public/common/sandbox_linux.h"
 
-// TODO(jln) move this somewhere else.
-#if defined(__i386__) || defined(__x86_64__)
-#define SECCOMP_BPF_SANDBOX
-#endif
-
 template <typename T> struct DefaultSingletonTraits;
 namespace sandbox { class SetuidSandboxClient; }
 
 namespace content {
 
 // A singleton class to represent and change our sandboxing state for the
 // three main Linux sandboxes.
 class LinuxSandbox {
  public:
   // This is a list of sandbox IPC methods which the renderer may send to the
@@ skipping 27 matching lines @@
   // These should be called together.
   void PreinitializeSandboxBegin();
   void PreinitializeSandboxFinish(const std::string& process_type);
 
   // Returns the Status of the sandbox. Can only be queried if we went through
   // PreinitializeSandbox() or PreinitializeSandboxBegin(). This is a bitmask
   // and uses the constants defined in "enum LinuxSandboxStatus".
   // Since we need to provide the status before the sandboxes are actually
   // started, this returns what will actually happen once the various Start*
   // functions are called from inside a renderer.
-  int GetStatus();
+  int GetStatus() const;
+  // Is the current process single threaded ?
+  bool IsSingleThreaded() const;
 
   // Simple accessor for our instance of the setuid sandbox. Will never return
   // NULL.
   // There is no StartSetuidSandbox(), the SetuidSandboxClient instance should
   // be used directly.
   sandbox::SetuidSandboxClient* setuid_sandbox_client() const;
 
   // Check the policy and eventually start the seccomp-legacy sandbox.
   bool StartSeccompLegacy(const std::string& process_type);
   // Check the policy and eventually start the seccomp-bpf sandbox.
-  // TODO(jln): not implemented at the moment.
   bool StartSeccompBpf(const std::string& process_type);
 
  private:
   friend struct DefaultSingletonTraits<LinuxSandbox>;
-  bool ShouldEnableSeccompLegacy(const std::string& process_type);
+
+  // We must have be pre_initialized_ before using either of these.

[Markus (顧孟勤), 2012/08/02 20:39:13]

s/be/been/

[jln (very slow on Chromium), 2012/08/02 20:50:40]

Done.

+  bool seccomp_legacy_supported() const;
+  bool seccomp_bpf_supported() const;
 
   int proc_fd_;
   // Have we been through PreinitializeSandbox or PreinitializeSandboxBegin ?
   bool pre_initialized_;
   bool seccomp_legacy_supported_;  // Accurate if pre_initialized_.
+  bool seccomp_bpf_supported_;  // Accurate if pre_initialized_.
   scoped_ptr<sandbox::SetuidSandboxClient> setuid_sandbox_client_;
-  LinuxSandbox();
+
   ~LinuxSandbox();
-  DISALLOW_COPY_AND_ASSIGN(LinuxSandbox);
+  DISALLOW_IMPLICIT_CONSTRUCTORS(LinuxSandbox);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_COMMON_SANDBOX_LINUX_H_