blob: 3c70a7a642f44b17f5eb17875d1b099f37a64d0c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
|
// Copyright (c) 2009 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CHROME_COMMON_SANDBOX_INIT_WRAPPER_H_
#define CHROME_COMMON_SANDBOX_INIT_WRAPPER_H_
#pragma once
// Wraps the sandbox initialization and platform variables to consolodate
// the code and reduce the number of platform ifdefs elsewhere. The POSIX
// version of this wrapper is basically empty.
#include "build/build_config.h"
#include <string>
#include "base/basictypes.h"
#if defined(OS_WIN)
#include "sandbox/src/sandbox.h"
#endif
class CommandLine;
#if defined(OS_WIN)
class SandboxInitWrapper {
public:
SandboxInitWrapper() : broker_services_(), target_services_() { }
// SetServices() needs to be called before InitializeSandbox() on Win32 with
// the info received from the chrome exe main.
void SetServices(sandbox::SandboxInterfaceInfo* sandbox_info);
sandbox::BrokerServices* BrokerServices() const { return broker_services_; }
sandbox::TargetServices* TargetServices() const { return target_services_; }
// Initialize the sandbox for renderer, gpu, utility, worker, nacl, and
// plug-in processes, depending on the command line flags. The browser
// process is not sandboxed.
// Returns true if the sandbox was initialized succesfully, false if an error
// occurred. If process_type isn't one that needs sandboxing true is always
// returned.
bool InitializeSandbox(const CommandLine& parsed_command_line,
const std::string& process_type);
private:
sandbox::BrokerServices* broker_services_;
sandbox::TargetServices* target_services_;
DISALLOW_COPY_AND_ASSIGN(SandboxInitWrapper);
};
#elif defined(OS_POSIX)
class SandboxInitWrapper {
public:
SandboxInitWrapper() { }
// Initialize the sandbox for renderer and plug-in processes, depending on
// the command line flags. The browser process is not sandboxed.
// Returns true if the sandbox was initialized succesfully, false if an error
// occurred. If process_type isn't one that needs sandboxing true is always
// returned.
bool InitializeSandbox(const CommandLine& parsed_command_line,
const std::string& process_type);
private:
DISALLOW_COPY_AND_ASSIGN(SandboxInitWrapper);
};
#endif
#endif // CHROME_COMMON_SANDBOX_INIT_WRAPPER_H_
|
