[SyncFS] Build indexes from FileTracker entries on disk.
[chromium-blink-merge.git] / content / common / sandbox_init_mac.cc
blobd6f2112dac6256c994477b9e2fd556e49829984d
1 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 #include "content/public/common/sandbox_init.h"
7 #include "base/command_line.h"
8 #include "base/files/file_path.h"
9 #include "base/logging.h"
10 #include "content/common/sandbox_mac.h"
11 #include "content/public/common/content_switches.h"
13 namespace content {
15 bool InitializeSandbox(int sandbox_type, const base::FilePath& allowed_dir) {
16 // Warm up APIs before turning on the sandbox.
17 Sandbox::SandboxWarmup(sandbox_type);
19 // Actually sandbox the process.
20 return Sandbox::EnableSandbox(sandbox_type, allowed_dir);
23 // Fill in |sandbox_type| and |allowed_dir| based on the command line, returns
24 // false if the current process type doesn't need to be sandboxed or if the
25 // sandbox was disabled from the command line.
26 bool GetSandboxTypeFromCommandLine(int* sandbox_type,
27 base::FilePath* allowed_dir) {
28 DCHECK(sandbox_type);
29 DCHECK(allowed_dir);
31 *sandbox_type = -1;
32 *allowed_dir = base::FilePath(); // Empty by default.
34 const CommandLine& command_line = *CommandLine::ForCurrentProcess();
35 if (command_line.HasSwitch(switches::kNoSandbox))
36 return false;
38 std::string process_type =
39 command_line.GetSwitchValueASCII(switches::kProcessType);
40 if (process_type.empty()) {
41 // Browser process isn't sandboxed.
42 return false;
43 } else if (process_type == switches::kRendererProcess) {
44 *sandbox_type = SANDBOX_TYPE_RENDERER;
45 } else if (process_type == switches::kUtilityProcess) {
46 // Utility process sandbox.
47 *sandbox_type = SANDBOX_TYPE_UTILITY;
48 *allowed_dir =
49 command_line.GetSwitchValuePath(switches::kUtilityProcessAllowedDir);
50 } else if (process_type == switches::kWorkerProcess) {
51 // Worker process sandbox.
52 *sandbox_type = SANDBOX_TYPE_WORKER;
53 } else if (process_type == switches::kGpuProcess) {
54 if (command_line.HasSwitch(switches::kDisableGpuSandbox))
55 return false;
56 *sandbox_type = SANDBOX_TYPE_GPU;
57 } else if ((process_type == switches::kPluginProcess) ||
58 (process_type == switches::kPpapiBrokerProcess)) {
59 return false;
60 } else if (process_type == switches::kPpapiPluginProcess) {
61 *sandbox_type = SANDBOX_TYPE_PPAPI;
62 } else {
63 // This is a process which we don't know about, i.e. an embedder-defined
64 // process. If the embedder wants it sandboxed, they have a chance to return
65 // the sandbox profile in ContentClient::GetSandboxProfileForSandboxType.
66 return false;
68 return true;
71 bool InitializeSandbox() {
72 int sandbox_type = 0;
73 base::FilePath allowed_dir;
74 if (!GetSandboxTypeFromCommandLine(&sandbox_type, &allowed_dir))
75 return true;
76 return InitializeSandbox(sandbox_type, allowed_dir);
79 extern const char kBootstrapPortNameForNPAPIPlugins[] =
80 "org.chromium.sandbox.real_bootstrap_server";
82 } // namespace content