1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 2 // Use of this source code is governed by a BSD-style license that can be 3 // found in the LICENSE file. 4 5 #ifndef CONTENT_PUBLIC_COMMON_SANDBOX_TYPE_MAC_H_ 6 #define CONTENT_PUBLIC_COMMON_SANDBOX_TYPE_MAC_H_ 7 8 namespace content { 9 10 // Defines the Mac sandbox types known within content. Embedders can add 11 // additional sandbox types with IDs starting with SANDBOX_TYPE_AFTER_LAST_TYPE. 12 13 enum SandboxType { 14 SANDBOX_TYPE_FIRST_TYPE = 0, // Placeholder to ease iteration. 15 16 SANDBOX_TYPE_RENDERER = SANDBOX_TYPE_FIRST_TYPE, 17 18 // The worker process uses the most restrictive sandbox which has almost 19 // *everything* locked down. Only a couple of /System/Library/ paths and 20 // some other very basic operations (e.g., reading metadata to allow 21 // following symlinks) are permitted. 22 SANDBOX_TYPE_WORKER, 23 24 // Utility process is as restrictive as the worker process except full 25 // access is allowed to one configurable directory. 26 SANDBOX_TYPE_UTILITY, 27 28 // GPU process. 29 SANDBOX_TYPE_GPU, 30 31 // The PPAPI plugin process. 32 SANDBOX_TYPE_PPAPI, 33 34 SANDBOX_TYPE_AFTER_LAST_TYPE, // Placeholder to ease iteration. 35 }; 36 37 } // namespace content 38 39 #endif // CONTENT_PUBLIC_COMMON_SANDBOX_TYPE_MAC_H_ 40
