1// Copyright 2013 The Chromium Authors. All rights reserved.
2// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
4
5#include "components/nacl/loader/nacl_main_platform_delegate.h"
6
7NaClMainPlatformDelegate::NaClMainPlatformDelegate(
8    const content::MainFunctionParams& parameters)
9    : parameters_(parameters) {
10}
11
12NaClMainPlatformDelegate::~NaClMainPlatformDelegate() {
13}
14
15void NaClMainPlatformDelegate::EnableSandbox() {
16  // The setuid sandbox is started in the zygote process: zygote_main_linux.cc
17  // http://code.google.com/p/chromium/wiki/LinuxSUIDSandbox
18  //
19  // The seccomp sandbox is started in the renderer.
20  // http://code.google.com/p/seccompsandbox/
21  // seccomp is currently disabled for nacl.
22  // http://code.google.com/p/chromium/issues/detail?id=59423
23  // See the code in chrome/renderer/renderer_main_platform_delegate_linux.cc
24  // for how to turn seccomp on.
25  //
26  // The seccomp sandbox should not be enabled for Native Client until
27  // all of these issues are fixed:
28  // http://code.google.com/p/nativeclient/issues/list?q=label:Seccomp
29  // At best, NaCl will not work.  At worst, enabling the seccomp sandbox
30  // could create a hole in the NaCl sandbox.
31}
32