sandbox: Extend Broker to support improved file permissions
commitad78f42ca0a83d590ff9f32050adfcb277fb34d6
authorleecam <leecam@chromium.org>
Wed, 26 Nov 2014 22:08:45 +0000 (26 14:08 -0800)
committerCommit bot <commit-bot@chromium.org>
Wed, 26 Nov 2014 22:09:29 +0000 (26 22:09 +0000)
tree1e5326248df4760858f2ee424485bb5543bf97c0
parent01320583c956a572dc014a7e209ce90d60437ad3
sandbox: Extend Broker to support improved file permissions

Added BrokerFilePermission class which is used to specify whitelists for the Broker

BUG=432369
TEST=sandbox_linux_unittest, chrome on Ubuntu 14.04 and 14.10

Review URL: https://codereview.chromium.org/721553002

Cr-Commit-Position: refs/heads/master@{#305894}
17 files changed:
content/common/sandbox_linux/bpf_cros_arm_gpu_policy_linux.cc
content/common/sandbox_linux/bpf_gpu_policy_linux.cc
content/common/sandbox_linux/bpf_gpu_policy_linux.h
sandbox/linux/BUILD.gn
sandbox/linux/bpf_dsl/bpf_dsl_more_unittest.cc
sandbox/linux/sandbox_linux.gypi
sandbox/linux/sandbox_linux_test_sources.gypi
sandbox/linux/syscall_broker/broker_client.cc
sandbox/linux/syscall_broker/broker_file_permission.cc [new file with mode: 0644]
sandbox/linux/syscall_broker/broker_file_permission.h [new file with mode: 0644]
sandbox/linux/syscall_broker/broker_file_permission_unittest.cc [new file with mode: 0644]
sandbox/linux/syscall_broker/broker_host.cc
sandbox/linux/syscall_broker/broker_policy.cc
sandbox/linux/syscall_broker/broker_policy.h
sandbox/linux/syscall_broker/broker_process.cc
sandbox/linux/syscall_broker/broker_process.h
sandbox/linux/syscall_broker/broker_process_unittest.cc