sandbox/linux/bpf_dsl/bpf_dsl_impl.h

   1 // Copyright 2014 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #ifndef SANDBOX_LINUX_BPF_DSL_BPF_DSL_IMPL_H_
   6 #define SANDBOX_LINUX_BPF_DSL_BPF_DSL_IMPL_H_
   7
   8 #include "base/macros.h"
   9 #include "base/memory/ref_counted.h"
  10 #include "sandbox/sandbox_export.h"
  11
  12 namespace sandbox {
  13 namespace bpf_dsl {
  14 class ErrorCode;
  15 class PolicyCompiler;
  16
  17 namespace internal {
  18
  19 // Internal interface implemented by BoolExpr implementations.
  20 class BoolExprImpl : public base::RefCounted<BoolExprImpl> {
  21  public:
  22   // Compile uses |pc| to construct an ErrorCode that conditionally continues
  23   // to either |true_ec| or |false_ec|, depending on whether the represented
  24   // boolean expression is true or false.
  25   virtual ErrorCode Compile(PolicyCompiler* pc,
  26                             ErrorCode true_ec,
  27                             ErrorCode false_ec) const = 0;
  28
  29  protected:
  30   BoolExprImpl() {}
  31   virtual ~BoolExprImpl() {}
  32
  33  private:
  34   friend class base::RefCounted<BoolExprImpl>;
  35   DISALLOW_COPY_AND_ASSIGN(BoolExprImpl);
  36 };
  37
  38 // Internal interface implemented by ResultExpr implementations.
  39 class ResultExprImpl : public base::RefCounted<ResultExprImpl> {
  40  public:
  41   // Compile uses |pc| to construct an ErrorCode analogous to the represented
  42   // result expression.
  43   virtual ErrorCode Compile(PolicyCompiler* pc) const = 0;
  44
  45   // HasUnsafeTraps returns whether the result expression is or recursively
  46   // contains an unsafe trap expression.
  47   virtual bool HasUnsafeTraps() const;
  48
  49   // IsAllow returns whether the result expression is an "allow" result.
  50   virtual bool IsAllow() const;
  51
  52   // IsAllow returns whether the result expression is a "deny" result.
  53   virtual bool IsDeny() const;
  54
  55  protected:
  56   ResultExprImpl() {}
  57   virtual ~ResultExprImpl() {}
  58
  59  private:
  60   friend class base::RefCounted<ResultExprImpl>;
  61   DISALLOW_COPY_AND_ASSIGN(ResultExprImpl);
  62 };
  63
  64 }  // namespace internal
  65 }  // namespace bpf_dsl
  66 }  // namespace sandbox
  67
  68 #endif  // SANDBOX_LINUX_BPF_DSL_BPF_DSL_IMPL_H_