Lines Matching full:sandbox
11 #include <sandbox.h>
44 // Is the sandbox currently active.
52 // Mapping from sandbox process types to resource IDs containing the sandbox
102 // Errors quoting strings for the Sandbox profile are always fatal, report them
114 NSString* Sandbox::AllowMetadataForPath(const base::FilePath& allowed_path) {
147 bool Sandbox::QuotePlainString(const std::string& src_utf8, std::string* dst) {
183 bool Sandbox::QuoteStringForRegex(const std::string& str_utf8,
185 // Characters with special meanings in sandbox profile syntax.
220 // The Mac sandbox regex parser only handles printable ASCII characters.
244 // Warm up System APIs that empirically need to be accessed before the Sandbox
253 void Sandbox::SandboxWarmup(int sandbox_type) {
335 NSString* Sandbox::BuildAllowDirectoryAccessSandboxString(
347 // The sandbox only understands "real" paths. This resolving step is
369 // Load the appropriate template for the given sandbox type.
372 // We use a custom sandbox definition to lock things down as tightly as
376 // Find resource id for sandbox profile to use for the specific sandbox type.
388 // Check if the embedder knows about this sandbox process type.
392 CHECK(sandbox_type_found) << "Unknown sandbox type " << sandbox_type;
399 LOG(FATAL) << "Failed to load the sandbox profile (resource id "
408 LOG(FATAL) << "Failed to load the common sandbox profile";
427 bool Sandbox::PostProcessSandboxProfile(
443 DLOG(FATAL) << "Bad Sandbox profile, should contain at least one token ("
495 // Turns on the OS X sandbox for this process.
498 bool Sandbox::EnableSandbox(int sandbox_type,
515 // Add the sandbox commands necessary to access the given directory.
541 // Without this, the sandbox will print a message to the system log every
550 // Splice the path of the user's home directory into the sandbox profile
562 // >=10.7 Sandbox rules.
589 // Initialize sandbox.
593 DLOG_IF(FATAL, !success) << "Failed to initialize sandbox: "
603 bool Sandbox::SandboxIsCurrentlyActive() {
608 base::FilePath Sandbox::GetCanonicalSandboxPath(const base::FilePath& path) {
