| /external/libchrome/sandbox/linux/ |
| D | sandbox_linux.gypi | 126 'bpf_dsl/bpf_dsl.cc',
127 'bpf_dsl/bpf_dsl.h',
128 'bpf_dsl/bpf_dsl_forward.h',
129 'bpf_dsl/bpf_dsl_impl.h',
130 'bpf_dsl/codegen.cc',
131 'bpf_dsl/codegen.h',
132 'bpf_dsl/cons.h',
133 'bpf_dsl/errorcode.h',
134 'bpf_dsl/linux_syscall_ranges.h',
135 'bpf_dsl/policy.cc',
[all …]
|
| D | BUILD.gn | 130 "bpf_dsl/bpf_dsl_unittest.cc",
131 "bpf_dsl/codegen_unittest.cc",
132 "bpf_dsl/cons_unittest.cc",
133 "bpf_dsl/dump_bpf.cc",
134 "bpf_dsl/dump_bpf.h",
135 "bpf_dsl/syscall_set_unittest.cc",
136 "bpf_dsl/test_trap_registry.cc",
137 "bpf_dsl/test_trap_registry.h",
138 "bpf_dsl/test_trap_registry_unittest.cc",
139 "bpf_dsl/verifier.cc",
[all …]
|
| D | sandbox_linux_test_sources.gypi | 43 'bpf_dsl/bpf_dsl_unittest.cc',
44 'bpf_dsl/codegen_unittest.cc',
45 'bpf_dsl/cons_unittest.cc',
46 'bpf_dsl/dump_bpf.cc',
47 'bpf_dsl/dump_bpf.h',
48 'bpf_dsl/syscall_set_unittest.cc',
49 'bpf_dsl/test_trap_registry.cc',
50 'bpf_dsl/test_trap_registry.h',
51 'bpf_dsl/test_trap_registry_unittest.cc',
52 'bpf_dsl/verifier.cc',
[all …]
|
| D | sandbox_linux_nacl_nonsfi.gyp | 32 'bpf_dsl/bpf_dsl.cc',
33 'bpf_dsl/codegen.cc',
34 'bpf_dsl/policy.cc',
35 'bpf_dsl/policy_compiler.cc',
36 'bpf_dsl/syscall_set.cc',
|
| /external/libchrome/sandbox/linux/seccomp-bpf-helpers/ |
| D | syscall_parameters_restrictions.h | 24 SANDBOX_EXPORT bpf_dsl::ResultExpr RestrictCloneToThreadsAndEPERMFork();
28 SANDBOX_EXPORT bpf_dsl::ResultExpr RestrictPrctl();
32 SANDBOX_EXPORT bpf_dsl::ResultExpr RestrictIoctl();
38 SANDBOX_EXPORT bpf_dsl::ResultExpr RestrictMmapFlags();
42 SANDBOX_EXPORT bpf_dsl::ResultExpr RestrictMprotectFlags();
49 SANDBOX_EXPORT bpf_dsl::ResultExpr RestrictFcntlCommands();
54 SANDBOX_EXPORT bpf_dsl::ResultExpr RestrictSocketcallCommand();
60 SANDBOX_EXPORT bpf_dsl::ResultExpr RestrictKillTarget(pid_t target_pid,
64 SANDBOX_EXPORT bpf_dsl::ResultExpr RestrictFutex();
68 SANDBOX_EXPORT bpf_dsl::ResultExpr RestrictGetSetpriority(pid_t target_pid);
[all …]
|
| D | sigsys_handlers.cc | 247 bpf_dsl::ResultExpr CrashSIGSYS() { in CrashSIGSYS()
248 return bpf_dsl::Trap(CrashSIGSYS_Handler, NULL); in CrashSIGSYS()
251 bpf_dsl::ResultExpr CrashSIGSYSClone() { in CrashSIGSYSClone()
252 return bpf_dsl::Trap(SIGSYSCloneFailure, NULL); in CrashSIGSYSClone()
255 bpf_dsl::ResultExpr CrashSIGSYSPrctl() { in CrashSIGSYSPrctl()
256 return bpf_dsl::Trap(SIGSYSPrctlFailure, NULL); in CrashSIGSYSPrctl()
259 bpf_dsl::ResultExpr CrashSIGSYSIoctl() { in CrashSIGSYSIoctl()
260 return bpf_dsl::Trap(SIGSYSIoctlFailure, NULL); in CrashSIGSYSIoctl()
263 bpf_dsl::ResultExpr CrashSIGSYSKill() { in CrashSIGSYSKill()
264 return bpf_dsl::Trap(SIGSYSKillFailure, NULL); in CrashSIGSYSKill()
[all …]
|
| D | sigsys_handlers.h | 63 SANDBOX_EXPORT bpf_dsl::ResultExpr CrashSIGSYS();
64 SANDBOX_EXPORT bpf_dsl::ResultExpr CrashSIGSYSClone();
65 SANDBOX_EXPORT bpf_dsl::ResultExpr CrashSIGSYSPrctl();
66 SANDBOX_EXPORT bpf_dsl::ResultExpr CrashSIGSYSIoctl();
67 SANDBOX_EXPORT bpf_dsl::ResultExpr CrashSIGSYSKill();
68 SANDBOX_EXPORT bpf_dsl::ResultExpr CrashSIGSYSFutex();
69 SANDBOX_EXPORT bpf_dsl::ResultExpr RewriteSchedSIGSYS();
|
| D | syscall_parameters_restrictions_unittests.cc | 43 using sandbox::bpf_dsl::Allow;
44 using sandbox::bpf_dsl::ResultExpr;
46 class RestrictClockIdPolicy : public bpf_dsl::Policy {
111 class RestrictSchedPolicy : public bpf_dsl::Policy {
177 class RestrictPrlimit64Policy : public bpf_dsl::Policy {
206 class RestrictGetrusagePolicy : public bpf_dsl::Policy {
|
| D | baseline_policy.h | 26 class SANDBOX_EXPORT BaselinePolicy : public bpf_dsl::Policy {
34 bpf_dsl::ResultExpr EvaluateSyscall(int system_call_number) const override;
35 bpf_dsl::ResultExpr InvalidSyscall() const override;
|
| D | syscall_parameters_restrictions.cc | 102 using sandbox::bpf_dsl::Allow;
103 using sandbox::bpf_dsl::Arg;
104 using sandbox::bpf_dsl::BoolExpr;
105 using sandbox::bpf_dsl::Error;
106 using sandbox::bpf_dsl::If;
107 using sandbox::bpf_dsl::ResultExpr;
|
| D | baseline_policy.cc | 31 using sandbox::bpf_dsl::Allow;
32 using sandbox::bpf_dsl::Arg;
33 using sandbox::bpf_dsl::Error;
34 using sandbox::bpf_dsl::If;
35 using sandbox::bpf_dsl::ResultExpr;
|
| /external/libchrome/sandbox/linux/seccomp-bpf/ |
| D | bpf_tests_unittest.cc | 25 using sandbox::bpf_dsl::Allow;
26 using sandbox::bpf_dsl::Error;
27 using sandbox::bpf_dsl::ResultExpr;
44 class EmptyClassTakingPolicy : public bpf_dsl::Policy {
85 class EnosysPtracePolicy : public bpf_dsl::Policy {
116 scoped_ptr<bpf_dsl::Policy> GetSandboxBPFPolicy() override { in GetSandboxBPFPolicy()
117 return scoped_ptr<bpf_dsl::Policy>(new EnosysPtracePolicy()); in GetSandboxBPFPolicy()
|
| D | sandbox_bpf.cc | 118 bpf_dsl::ResultExpr SandboxPanic(const char* error) { in SandboxPanic()
119 return bpf_dsl::Trap(SandboxPanicTrap, error); in SandboxPanic()
124 SandboxBPF::SandboxBPF(bpf_dsl::Policy* policy) in SandboxBPF()
209 return bpf_dsl::PolicyCompiler::IsRequiredForUnsafeTrap(sysno); in IsRequiredForUnsafeTrap()
224 bpf_dsl::PolicyCompiler compiler(policy_.get(), Trap::Registry()); in AssembleFilter()
|
| D | sandbox_bpf.h | 18 namespace bpf_dsl {
35 explicit SandboxBPF(bpf_dsl::Policy* policy);
107 scoped_ptr<bpf_dsl::Policy> policy_;
|
| D | syscall_unittest.cc | 29 using sandbox::bpf_dsl::Allow;
30 using sandbox::bpf_dsl::ResultExpr;
31 using sandbox::bpf_dsl::Trap;
111 class CopyAllArgsOnUnamePolicy : public bpf_dsl::Policy {
|
| D | bpf_tester_compatibility_delegate.h | 31 scoped_ptr<bpf_dsl::Policy> GetSandboxBPFPolicy() override { in GetSandboxBPFPolicy()
36 return scoped_ptr<bpf_dsl::Policy>(new Policy(&aux_)); in GetSandboxBPFPolicy()
|
| D | trap.h | 28 class SANDBOX_EXPORT Trap : public bpf_dsl::TrapRegistry {
36 static bpf_dsl::TrapRegistry* Registry();
|
| D | bpf_tests.h | 107 scoped_ptr<bpf_dsl::Policy> GetSandboxBPFPolicy() override { in GetSandboxBPFPolicy()
108 return scoped_ptr<bpf_dsl::Policy>(new PolicyClass()); in GetSandboxBPFPolicy()
|
| D | DEPS | 2 "+sandbox/linux/bpf_dsl",
|
| /external/libchrome/sandbox/linux/bpf_dsl/ |
| D | bpf_dsl_forward.h | 12 namespace bpf_dsl {
38 scoped_refptr<const sandbox::bpf_dsl::internal::BoolExprImpl>;
40 scoped_refptr<const sandbox::bpf_dsl::internal::ResultExprImpl>;
|
| D | bpf_dsl.h | 77 namespace bpf_dsl {
259 using bpf_dsl::Not;
260 using bpf_dsl::AllOf;
261 using bpf_dsl::AnyOf;
|
| D | policy_compiler.h | 20 namespace bpf_dsl {
28 using PanicFunc = bpf_dsl::ResultExpr (*)(const char* error);
|
| D | policy.cc | 12 namespace bpf_dsl { namespace
|
| D | bpf_dsl.cc | 21 namespace bpf_dsl { namespace
347 template class scoped_refptr<const sandbox::bpf_dsl::internal::BoolExprImpl>;
348 template class scoped_refptr<const sandbox::bpf_dsl::internal::ResultExprImpl>;
|
| /external/libchrome/ |
| D | SConstruct | 282 linux/bpf_dsl/bpf_dsl.cc
283 linux/bpf_dsl/codegen.cc
284 linux/bpf_dsl/dump_bpf.cc
285 linux/bpf_dsl/policy.cc
286 linux/bpf_dsl/policy_compiler.cc
287 linux/bpf_dsl/syscall_set.cc
288 linux/bpf_dsl/verifier.cc
|