| /external/chromium_org/components/nacl/loader/nonsfi/ |
| nonsfi_sandbox.h | 9 #include "sandbox/linux/seccomp-bpf/sandbox_bpf_policy.h"
14 // The seccomp sandbox policy for NaCl non-SFI mode. Note that this
16 // depends on seccomp sandbox.
17 class NaClNonSfiBPFSandboxPolicy : public sandbox::SandboxBPFPolicy {
22 virtual sandbox::ErrorCode EvaluateSyscall(sandbox::SandboxBPF* sb,
29 // Initializes seccomp-bpf sandbox for non-SFI NaCl. Returns false on
|
| /external/chromium_org/sandbox/linux/seccomp-bpf/ |
| errorcode_unittest.cc | 7 #include "sandbox/linux/seccomp-bpf/sandbox_bpf.h"
8 #include "sandbox/linux/tests/unit_tests.h"
10 namespace sandbox { namespace
24 SandboxBPF sandbox; local
25 ErrorCode e3 = sandbox.Trap(NULL, NULL);
41 SandboxBPF sandbox; local
42 ErrorCode e0 = sandbox.Trap(NULL, "a");
43 ErrorCode e1 = sandbox.Trap(NULL, "b");
47 ErrorCode e2 = sandbox.Trap(NULL, "a");
62 SandboxBPF sandbox; local
83 SandboxBPF sandbox; local
[all...] |
| /external/chromium_org/content/common/ |
| sandbox_init_win.cc | 11 #include "sandbox/win/src/sandbox.h"
12 #include "sandbox/win/src/sandbox_types.h"
16 bool InitializeSandbox(sandbox::SandboxInterfaceInfo* sandbox_info) {
18 sandbox::BrokerServices* broker_services = sandbox_info->broker_services;
24 // process because it will initialize the sandbox broker, which requires the
29 sandbox::TargetPolicy* policy = broker_services->CreatePolicy();
30 sandbox::ResultCode result = policy->CreateAlternateDesktop(true);
31 CHECK(sandbox::SBOX_ERROR_FAILED_TO_SWITCH_BACK_WINSTATION != result);
40 sandbox::TargetServices* target_services = sandbox_info->target_services
[all...] |
| /external/chromium_org/content/common/sandbox_linux/ |
| sandbox_bpf_base_policy_linux.h | 10 #include "sandbox/linux/seccomp-bpf-helpers/baseline_policy.h"
11 #include "sandbox/linux/seccomp-bpf/sandbox_bpf_policy.h"
13 using sandbox::ErrorCode;
14 using sandbox::SandboxBPF;
22 class SandboxBPFBasePolicy : public sandbox::SandboxBPFPolicy {
31 // is passed to the SandboxBPF class and the sandbox is engaged.
32 // If PreSandboxHook() returns true, the sandbox is guaranteed to be
34 // This will be used when enabling the sandbox though
42 // Compose the BaselinePolicy from sandbox/.
43 scoped_ptr<sandbox::BaselinePolicy> baseline_policy_
[all...] |
| sandbox_seccomp_bpf_linux.h | 13 namespace sandbox { namespace
19 // This class has two main sets of APIs. One can be used to start the sandbox
24 // This is the API to enable a seccomp-bpf sandbox for content/
26 // Is the sandbox globally enabled, can anything use it at all ?
27 // This looks at global command line flags to see if the sandbox
30 // Should the sandbox be enabled for process_type ?
32 // Check if the kernel supports this sandbox. It's useful to "prewarm"
35 // Start the sandbox and apply the policy for process_type, depending on
39 // This is the API to enable a seccomp-bpf sandbox by using an
42 scoped_ptr<sandbox::SandboxBPFPolicy> policy)
[all...] |
| /external/chromium_org/components/nacl/loader/ |
| nacl_main_platform_delegate_win.cc | 8 #include "sandbox/win/src/sandbox.h"
19 sandbox::TargetServices* target_services =
23 // Cause advapi32 to load before the sandbox is turned on.
26 // Warm up language subsystems before the sandbox is turned on.
29 // Turn the sandbox on.
|
| /external/chromium_org/content/browser/ |
| bootstrap_sandbox_mac.cc | 22 #include "sandbox/mac/bootstrap_sandbox.h"
35 sandbox::BootstrapSandbox* sandbox() const { function in class:content::__anon11357::BootstrapSandboxPolicy
58 void AddBaselinePolicy(sandbox::BootstrapSandboxPolicy* policy);
62 scoped_ptr<sandbox::BootstrapSandbox> sandbox_;
71 sandbox()->ChildDied(data.handle);
76 sandbox()->ChildDied(data.handle);
84 sandbox()->ChildDied(
94 : sandbox_(sandbox::BootstrapSandbox::Create()) {
111 sandbox::BootstrapSandboxPolicy policy
[all...] |
| bootstrap_sandbox_mac.h | 8 namespace sandbox { namespace
14 // Whether or not the bootstrap sandbox should be enabled.
19 // On the first call to this function, the sandbox will be created and all
21 sandbox::BootstrapSandbox* GetBootstrapSandbox();
|
| /external/chromium_org/content/public/common/ |
| sandbox_linux.h | 10 // These form a bitmask which describes the conditions of the Linux sandbox.
14 // SUID sandbox active.
17 // SUID sandbox is using the PID namespace.
20 // SUID sandbox is using the network namespace.
23 // seccomp-bpf sandbox active.
29 // A flag that denotes an invalid sandbox status.
|
| /external/chromium_org/sandbox/linux/seccomp-bpf-helpers/ |
| syscall_parameters_restrictions.cc | 5 #include "sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h"
25 #include "sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h"
26 #include "sandbox/linux/seccomp-bpf/linux_seccomp.h"
27 #include "sandbox/linux/seccomp-bpf/sandbox_bpf.h"
28 #include "sandbox/linux/services/android_futex.h"
68 namespace sandbox { namespace
73 ErrorCode RestrictCloneToThreadsAndEPERMFork(SandboxBPF* sandbox) {
80 return sandbox->Cond(0, ErrorCode::TP_32BIT, ErrorCode::OP_EQUAL,
83 sandbox->Cond(0, ErrorCode::TP_32BIT, ErrorCode::OP_HAS_ANY_BITS,
85 sandbox->Trap(SIGSYSCloneFailure, NULL)
[all...] |
| /external/chromium_org/sandbox/linux/tests/ |
| sandbox_test_runner_function_pointer.cc | 5 #include "sandbox/linux/tests/sandbox_test_runner_function_pointer.h"
10 namespace sandbox { namespace
25 } // namespace sandbox
|
| sandbox_test_runner_function_pointer.h | 9 #include "sandbox/linux/tests/sandbox_test_runner.h"
11 namespace sandbox { namespace
24 } // namespace sandbox
|
| /external/chromium_org/sandbox/win/src/ |
| Wow64_64.cc | 7 #include "sandbox/win/src/wow64.h"
9 namespace sandbox { namespace
18 } // namespace sandbox
|
| process_mitigations_win32k_interception.cc | 5 #include "sandbox/win/src/process_mitigations_win32k_interception.h"
7 namespace sandbox { namespace
28 } // namespace sandbox
|
| sync_policy_test.h | 8 #include "sandbox/win/tests/common/controller.h"
10 namespace sandbox { namespace
16 } // namespace sandbox
|
| named_pipe_interception.h | 5 #include "sandbox/win/src/nt_internals.h"
6 #include "sandbox/win/src/sandbox_types.h"
11 namespace sandbox { namespace
34 } // namespace sandbox
|
| sandbox_utils.cc | 5 #include "sandbox/win/src/sandbox_utils.h"
10 #include "sandbox/win/src/internal_types.h"
12 namespace sandbox { namespace
30 } // namespace sandbox
|
| named_pipe_interception.cc | 5 #include "sandbox/win/src/named_pipe_interception.h"
7 #include "sandbox/win/src/crosscall_client.h"
8 #include "sandbox/win/src/ipc_tags.h"
9 #include "sandbox/win/src/policy_params.h"
10 #include "sandbox/win/src/policy_target.h"
11 #include "sandbox/win/src/sandbox_factory.h"
12 #include "sandbox/win/src/sandbox_nt_util.h"
13 #include "sandbox/win/src/sharedmem_ipc_client.h"
14 #include "sandbox/win/src/target_services.h"
16 namespace sandbox { namespace
[all...] |
| /external/chromium_org/components/breakpad/app/ |
| DEPS | 2 "+sandbox",
|
| /external/chromium_org/content/plugin/ |
| DEPS | 5 "+sandbox/win/src",
|
| /external/chromium_org/content/ppapi_plugin/ |
| OWNERS | 3 # Mac Sandbox profiles.
|
| /external/chromium_org/content/utility/ |
| OWNERS | 3 # Mac Sandbox profiles.
|
| /external/chromium_org/third_party/WebKit/PerformanceTests/Mutation/ |
| remove-child.html | 5 <div id="sandbox" style="display:none"></div>
7 var sandbox = document.getElementById('sandbox');
29 observer.observe(sandbox, {childList: true});
42 sandbox.appendChild(document.createElement('div'));
45 while (sandbox.firstChild)
46 sandbox.removeChild(sandbox.firstChild);
50 observer.observe(sandbox, {childList: true});
|
| /external/chromium_org/ui/views/examples/ |
| DEPS | 4 "+sandbox",
|
| /external/chromium_org/chrome/common/extensions/docs/examples/howto/sandbox/ |
| manifest.json | 15 "sandbox": {
16 "pages": ["sandbox.html"]
|
