Lines Matching refs:Policy
19 class Policy;
22 // This class can be used to apply a syscall sandboxing policy expressed in a
23 // bpf_dsl::Policy object to the current process.
33 // Ownership of |policy| is transfered here to the sandbox object.
35 explicit SandboxBPF(bpf_dsl::Policy* policy);
36 // NOTE: Setting a policy and starting the sandbox is a one-way operation.
61 // a new policy requires making system calls, that might already be
64 // combined policy. So, it should only be used if there are no alternatives.
97 // Assembles a BPF filter program from the current policy. After calling this
101 // Assembles and installs a filter based on the policy that has previously
107 scoped_ptr<bpf_dsl::Policy> policy_;
