sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h - Issue 258073008: Linux sandbox: restrict *kill to the current process.

Side by Side Diff: sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h

Issue 258073008: Linux sandbox: restrict *kill to the current process. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src

Patch Set: Created 6 years, 7 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch | Annotate | Revision Log

« sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc ('K') | « sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc ('k') | sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
1 // Copyright (c) 2013 The Chromium Authors. All rights reserved.	1 // Copyright (c) 2013 The Chromium Authors. All rights reserved.

2 // Use of this source code is governed by a BSD-style license that can be	2 // Use of this source code is governed by a BSD-style license that can be

3 // found in the LICENSE file.	3 // found in the LICENSE file.

4	4

5 #ifndef SANDBOX_LINUX_SECCOMP_BPF_HELPERS_SIGSYS_HANDLERS_H_	5 #ifndef SANDBOX_LINUX_SECCOMP_BPF_HELPERS_SIGSYS_HANDLERS_H_

6 #define SANDBOX_LINUX_SECCOMP_BPF_HELPERS_SIGSYS_HANDLERS_H_	6 #define SANDBOX_LINUX_SECCOMP_BPF_HELPERS_SIGSYS_HANDLERS_H_

7	7

8 #include "base/basictypes.h"	8 #include "base/basictypes.h"

9 #include "build/build_config.h"	9 #include "build/build_config.h"

10 #include "sandbox/linux/sandbox_export.h"	10 #include "sandbox/linux/sandbox_export.h"

(...skipping 20 matching lines...) Expand all Loading...
31 SANDBOX_EXPORT intptr_t	31 SANDBOX_EXPORT intptr_t

32 SIGSYSCloneFailure(const struct arch_seccomp_data& args, void* aux);	32 SIGSYSCloneFailure(const struct arch_seccomp_data& args, void* aux);

33 // The crashing address will be (option & 0xFFF), where option is the prctl(2)	33 // The crashing address will be (option & 0xFFF), where option is the prctl(2)

34 // argument.	34 // argument.

35 SANDBOX_EXPORT intptr_t	35 SANDBOX_EXPORT intptr_t

36 SIGSYSPrctlFailure(const struct arch_seccomp_data& args, void* aux);	36 SIGSYSPrctlFailure(const struct arch_seccomp_data& args, void* aux);

37 // The crashing address will be request & 0xFFFF, where request is the ioctl(2)	37 // The crashing address will be request & 0xFFFF, where request is the ioctl(2)

38 // argument.	38 // argument.

39 SANDBOX_EXPORT intptr_t	39 SANDBOX_EXPORT intptr_t

40 SIGSYSIoctlFailure(const struct arch_seccomp_data& args, void* aux);	40 SIGSYSIoctlFailure(const struct arch_seccomp_data& args, void* aux);

	41 // The crashing address will be (pid & 0xFFF). Where pid is the first
	Jorge Lucangeli Obes 2014/04/29 17:01:26 Nit: ". Where" -> ", where" Nit: ". Where" -> ", where" jln (very slow on Chromium) 2014/04/29 18:19:52 Done. Show quoted text On 2014/04/29 17:01:26, Jorge Lucangeli Obes wrote: > Nit: ". Where" -> ", where" Done.
	42 // argument.

	43 intptr_t SIGSYSKillFailure(const struct arch_seccomp_data& args, void* aux);
	Jorge Lucangeli Obes 2014/04/29 17:01:26 This doesn't need to be SANDBOX_EXPORT? This doesn't need to be SANDBOX_EXPORT? jln (very slow on Chromium) 2014/04/29 18:19:52 No, this is only liked internally (to the baseline Show quoted text On 2014/04/29 17:01:26, Jorge Lucangeli Obes wrote: > This doesn't need to be SANDBOX_EXPORT? No, this is only liked internally (to the baseline policy) and not used anywhere else for now.
41	44

42 // Following four functions return substrings of error messages used	45 // Following four functions return substrings of error messages used

43 // in the above four functions. They are useful in death tests.	46 // in the above four functions. They are useful in death tests.

44 SANDBOX_EXPORT const char* GetErrorMessageContentForTests();	47 SANDBOX_EXPORT const char* GetErrorMessageContentForTests();

45 SANDBOX_EXPORT const char* GetCloneErrorMessageContentForTests();	48 SANDBOX_EXPORT const char* GetCloneErrorMessageContentForTests();

46 SANDBOX_EXPORT const char* GetPrctlErrorMessageContentForTests();	49 SANDBOX_EXPORT const char* GetPrctlErrorMessageContentForTests();

47 SANDBOX_EXPORT const char* GetIoctlErrorMessageContentForTests();	50 SANDBOX_EXPORT const char* GetIoctlErrorMessageContentForTests();

48	51

49 } // namespace sandbox.	52 } // namespace sandbox.

50	53

51 #endif // SANDBOX_LINUX_SECCOMP_BPF_HELPERS_SIGSYS_HANDLERS_H_	54 #endif // SANDBOX_LINUX_SECCOMP_BPF_HELPERS_SIGSYS_HANDLERS_H_

OLD	NEW