1a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles)// Copyright 2013 The Chromium Authors. All rights reserved. 25821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 35821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// found in the LICENSE file. 45821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 5a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles)#include "components/nacl/loader/nacl_main_platform_delegate.h" 65821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 75821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)NaClMainPlatformDelegate::NaClMainPlatformDelegate( 85821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const content::MainFunctionParams& parameters) 93551c9c881056c480085172ff9840cab31610854Torne (Richard Coles) : parameters_(parameters) { 105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)NaClMainPlatformDelegate::~NaClMainPlatformDelegate() { 135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)void NaClMainPlatformDelegate::EnableSandbox() { 165821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // The setuid sandbox is started in the zygote process: zygote_main_linux.cc 175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // http://code.google.com/p/chromium/wiki/LinuxSUIDSandbox 185821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // 195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // The seccomp sandbox is started in the renderer. 205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // http://code.google.com/p/seccompsandbox/ 215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // seccomp is currently disabled for nacl. 225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // http://code.google.com/p/chromium/issues/detail?id=59423 235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // See the code in chrome/renderer/renderer_main_platform_delegate_linux.cc 245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // for how to turn seccomp on. 255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // 265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // The seccomp sandbox should not be enabled for Native Client until 275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // all of these issues are fixed: 285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // http://code.google.com/p/nativeclient/issues/list?q=label:Seccomp 295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // At best, NaCl will not work. At worst, enabling the seccomp sandbox 305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // could create a hole in the NaCl sandbox. 315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 32