Lines Matching full:sandbox
11 #include <sandbox.h>
44 // Is the sandbox currently active.
52 // Mapping from sandbox process types to resource IDs containing the sandbox
102 // Errors quoting strings for the Sandbox profile are always fatal, report them
114 NSString* Sandbox::AllowMetadataForPath(const base::FilePath& allowed_path) {
147 bool Sandbox::QuotePlainString(const std::string& src_utf8, std::string* dst) {
183 bool Sandbox::QuoteStringForRegex(const std::string& str_utf8,
185 // Characters with special meanings in sandbox profile syntax.
220 // The Mac sandbox regex parser only handles printable ASCII characters.
244 // Warm up System APIs that empirically need to be accessed before the Sandbox
253 void Sandbox::SandboxWarmup(int sandbox_type) {
332 NSString* Sandbox::BuildAllowDirectoryAccessSandboxString(
344 // The sandbox only understands "real" paths. This resolving step is
366 // Load the appropriate template for the given sandbox type.
369 // We use a custom sandbox definition to lock things down as tightly as
373 // Find resource id for sandbox profile to use for the specific sandbox type.
385 // Check if the embedder knows about this sandbox process type.
389 CHECK(sandbox_type_found) << "Unknown sandbox type " << sandbox_type;
396 LOG(FATAL) << "Failed to load the sandbox profile (resource id "
405 LOG(FATAL) << "Failed to load the common sandbox profile";
424 bool Sandbox::PostProcessSandboxProfile(
440 DLOG(FATAL) << "Bad Sandbox profile, should contain at least one token ("
492 // Turns on the OS X sandbox for this process.
495 bool Sandbox::EnableSandbox(int sandbox_type,
512 // Add the sandbox commands necessary to access the given directory.
538 // Without this, the sandbox will print a message to the system log every
547 // Splice the path of the user's home directory into the sandbox profile
559 // >=10.7 Sandbox rules.
586 // Initialize sandbox.
590 DLOG_IF(FATAL, !success) << "Failed to initialize sandbox: "
600 bool Sandbox::SandboxIsCurrentlyActive() {
605 base::FilePath Sandbox::GetCanonicalSandboxPath(const base::FilePath& path) {
