Index: content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h |
diff --git a/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h b/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h |
index 91702fc443df8349daf2f9f780c6fe504592ae45..bf6d15b9013612f3070a9d2451a729e8d3fd7876 100644 |
--- a/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h |
+++ b/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h |
@@ -8,6 +8,7 @@ |
#include <string> |
#include "base/basictypes.h" |
+#include "base/files/scoped_file.h" |
#include "base/memory/scoped_ptr.h" |
namespace sandbox { |
@@ -36,12 +37,14 @@ class SandboxSeccompBPF { |
static bool SupportsSandbox(); |
// Start the sandbox and apply the policy for process_type, depending on |
// command line switches. |
- static bool StartSandbox(const std::string& process_type); |
+ static bool StartSandbox(const std::string& process_type, |
+ base::ScopedFD proc_task_fd); |
// This is the API to enable a seccomp-bpf sandbox by using an |
// external policy. |
static bool StartSandboxWithExternalPolicy( |
- scoped_ptr<sandbox::bpf_dsl::Policy> policy); |
+ scoped_ptr<sandbox::bpf_dsl::Policy> policy, |
+ base::ScopedFD proc_task_fd); |
// The "baseline" policy can be a useful base to build a sandbox policy. |
static scoped_ptr<sandbox::bpf_dsl::Policy> GetBaselinePolicy(); |