|
Linux sandbox: better APIs with /proc/ arguments
Unify sandbox:: APIs to always take /proc/ file descriptors
instead of /proc/self/ or /proc/self/task/.
Moreover, require |proc_fd| arguments to critical APIs rather
than rely on the caller to perform the right checks.
A descriptor to /proc is a better choice than a descriptor to
/proc/self/* because it keeps the same semantics after a fork().
BUG= 312380, 457377
TBR=nasko
Committed: https://crrev.com/4d91216184b506a9f0a623919862250f65d4f3e4
Cr-Commit-Position: refs/heads/master@{#317757}
Total comments: 1
|
Unified diffs |
Side-by-side diffs |
Delta from patch set |
Stats (+188 lines, -187 lines) |
Patch |
 |
M |
components/nacl/loader/nonsfi/nonsfi_sandbox.h
|
View
|
|
1 chunk |
+1 line, -1 line |
0 comments
|
Download
|
 |
M |
components/nacl/loader/nonsfi/nonsfi_sandbox.cc
|
View
|
|
1 chunk |
+2 lines, -2 lines |
0 comments
|
Download
|
 |
M |
components/nacl/loader/sandbox_linux/nacl_bpf_sandbox_linux.h
|
View
|
|
1 chunk |
+1 line, -1 line |
0 comments
|
Download
|
 |
M |
components/nacl/loader/sandbox_linux/nacl_bpf_sandbox_linux.cc
|
View
|
|
1 chunk |
+2 lines, -2 lines |
0 comments
|
Download
|
 |
M |
components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc
|
View
|
1
2
|
4 chunks |
+11 lines, -22 lines |
0 comments
|
Download
|
 |
M |
content/common/sandbox_linux/sandbox_init_linux.cc
|
View
|
|
1 chunk |
+2 lines, -2 lines |
0 comments
|
Download
|
 |
M |
content/common/sandbox_linux/sandbox_linux.cc
|
View
|
|
5 chunks |
+22 lines, -25 lines |
0 comments
|
Download
|
 |
M |
content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h
|
View
|
|
1 chunk |
+2 lines, -2 lines |
0 comments
|
Download
|
 |
M |
content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc
|
View
|
|
8 chunks |
+9 lines, -9 lines |
0 comments
|
Download
|
 |
M |
content/public/common/sandbox_init.h
|
View
|
|
1 chunk |
+2 lines, -2 lines |
0 comments
|
Download
|
 |
M |
sandbox/linux/seccomp-bpf/sandbox_bpf.h
|
View
|
|
2 chunks |
+4 lines, -4 lines |
0 comments
|
Download
|
 |
M |
sandbox/linux/seccomp-bpf/sandbox_bpf.cc
|
View
|
|
6 chunks |
+11 lines, -11 lines |
0 comments
|
Download
|
 |
M |
sandbox/linux/seccomp-bpf/sandbox_bpf_unittest.cc
|
View
|
|
1 chunk |
+1 line, -1 line |
0 comments
|
Download
|
 |
M |
sandbox/linux/services/credentials.h
|
View
|
|
2 chunks |
+13 lines, -7 lines |
0 comments
|
Download
|
 |
M |
sandbox/linux/services/credentials.cc
|
View
|
|
4 chunks |
+15 lines, -2 lines |
0 comments
|
Download
|
 |
M |
sandbox/linux/services/credentials_unittest.cc
|
View
|
|
3 chunks |
+6 lines, -4 lines |
0 comments
|
Download
|
 |
M |
sandbox/linux/services/namespace_sandbox_unittest.cc
|
View
|
|
2 chunks |
+2 lines, -1 line |
0 comments
|
Download
|
 |
M |
sandbox/linux/services/proc_util.h
|
View
|
|
2 chunks |
+6 lines, -8 lines |
0 comments
|
Download
|
 |
M |
sandbox/linux/services/proc_util.cc
|
View
|
|
3 chunks |
+21 lines, -25 lines |
0 comments
|
Download
|
 |
M |
sandbox/linux/services/proc_util_unittest.cc
|
View
|
1
|
2 chunks |
+9 lines, -9 lines |
0 comments
|
Download
|
 |
M |
sandbox/linux/services/thread_helpers.h
|
View
|
|
1 chunk |
+5 lines, -6 lines |
0 comments
|
Download
|
 |
M |
sandbox/linux/services/thread_helpers.cc
|
View
|
|
4 chunks |
+20 lines, -20 lines |
0 comments
|
Download
|
 |
M |
sandbox/linux/services/thread_helpers_unittests.cc
|
View
|
|
1 chunk |
+21 lines, -21 lines |
0 comments
|
Download
|
Total messages: 9 (3 generated)
|