Home | History | Annotate | Download | only in loader
      1 // Copyright 2013 The Chromium Authors. All rights reserved.
      2 // Use of this source code is governed by a BSD-style license that can be
      3 // found in the LICENSE file.
      4 
      5 #include "components/nacl/loader/nacl_main_platform_delegate.h"
      6 
      7 NaClMainPlatformDelegate::NaClMainPlatformDelegate(
      8     const content::MainFunctionParams& parameters)
      9     : parameters_(parameters) {
     10 }
     11 
     12 NaClMainPlatformDelegate::~NaClMainPlatformDelegate() {
     13 }
     14 
     15 void NaClMainPlatformDelegate::EnableSandbox() {
     16   // The setuid sandbox is started in the zygote process: zygote_main_linux.cc
     17   // http://code.google.com/p/chromium/wiki/LinuxSUIDSandbox
     18   //
     19   // The seccomp sandbox is started in the renderer.
     20   // http://code.google.com/p/seccompsandbox/
     21   // seccomp is currently disabled for nacl.
     22   // http://code.google.com/p/chromium/issues/detail?id=59423
     23   // See the code in chrome/renderer/renderer_main_platform_delegate_linux.cc
     24   // for how to turn seccomp on.
     25   //
     26   // The seccomp sandbox should not be enabled for Native Client until
     27   // all of these issues are fixed:
     28   // http://code.google.com/p/nativeclient/issues/list?q=label:Seccomp
     29   // At best, NaCl will not work.  At worst, enabling the seccomp sandbox
     30   // could create a hole in the NaCl sandbox.
     31 }
     32