Lines Matching full:sandbox
10 #include <sandbox.h>
42 // Is the sandbox currently active.
50 // Mapping from sandbox process types to resource IDs containing the sandbox
100 // Errors quoting strings for the Sandbox profile are always fatal, report them
112 NSString* Sandbox::AllowMetadataForPath(const base::FilePath& allowed_path) {
145 bool Sandbox::QuotePlainString(const std::string& src_utf8, std::string* dst) {
181 bool Sandbox::QuoteStringForRegex(const std::string& str_utf8,
183 // Characters with special meanings in sandbox profile syntax.
218 // The Mac sandbox regex parser only handles printable ASCII characters.
242 // Warm up System APIs that empirically need to be accessed before the Sandbox
251 void Sandbox::SandboxWarmup(int sandbox_type) {
318 NSString* Sandbox::BuildAllowDirectoryAccessSandboxString(
330 // The sandbox only understands "real" paths. This resolving step is
352 // Load the appropriate template for the given sandbox type.
355 // We use a custom sandbox definition to lock things down as tightly as
359 // Find resource id for sandbox profile to use for the specific sandbox type.
371 // Check if the embedder knows about this sandbox process type.
375 CHECK(sandbox_type_found) << "Unknown sandbox type " << sandbox_type;
382 LOG(FATAL) << "Failed to load the sandbox profile (resource id "
391 LOG(FATAL) << "Failed to load the common sandbox profile";
410 bool Sandbox::PostProcessSandboxProfile(
426 DLOG(FATAL) << "Bad Sandbox profile, should contain at least one token ("
478 // Turns on the OS X sandbox for this process.
481 bool Sandbox::EnableSandbox(int sandbox_type,
498 // Add the sandbox commands necessary to access the given directory.
524 // Without this, the sandbox will print a message to the system log every
533 // Splice the path of the user's home directory into the sandbox profile
545 // >=10.7 Sandbox rules.
572 // Initialize sandbox.
576 DLOG_IF(FATAL, !success) << "Failed to initialize sandbox: "
586 bool Sandbox::SandboxIsCurrentlyActive() {
591 base::FilePath Sandbox::GetCanonicalSandboxPath(const base::FilePath& path) {
