| Index: content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h
|
| diff --git a/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h b/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h
|
| index 91702fc443df8349daf2f9f780c6fe504592ae45..bf6d15b9013612f3070a9d2451a729e8d3fd7876 100644
|
| --- a/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h
|
| +++ b/content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h
|
| @@ -8,6 +8,7 @@
|
| #include <string>
|
|
|
| #include "base/basictypes.h"
|
| +#include "base/files/scoped_file.h"
|
| #include "base/memory/scoped_ptr.h"
|
|
|
| namespace sandbox {
|
| @@ -36,12 +37,14 @@ class SandboxSeccompBPF {
|
| static bool SupportsSandbox();
|
| // Start the sandbox and apply the policy for process_type, depending on
|
| // command line switches.
|
| - static bool StartSandbox(const std::string& process_type);
|
| + static bool StartSandbox(const std::string& process_type,
|
| + base::ScopedFD proc_task_fd);
|
|
|
| // This is the API to enable a seccomp-bpf sandbox by using an
|
| // external policy.
|
| static bool StartSandboxWithExternalPolicy(
|
| - scoped_ptr<sandbox::bpf_dsl::Policy> policy);
|
| + scoped_ptr<sandbox::bpf_dsl::Policy> policy,
|
| + base::ScopedFD proc_task_fd);
|
| // The "baseline" policy can be a useful base to build a sandbox policy.
|
| static scoped_ptr<sandbox::bpf_dsl::Policy> GetBaselinePolicy();
|
|
|
|
|