blob: 314bfbb5dd2080c38b722ace5d94265ff7786afb [file] [log] [blame]
// Copyright (c) 2011 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "content/common/sandbox_init_mac.h"
#include "base/callback.h"
#include "base/command_line.h"
#include "base/files/file_path.h"
#include "base/logging.h"
#include "content/common/sandbox_mac.h"
#include "content/public/common/content_switches.h"
#include "content/public/common/sandbox_init.h"
#include "sandbox/mac/seatbelt.h"
namespace content {
namespace {
bool InitializeSandbox(int sandbox_type,
const base::FilePath& allowed_dir,
base::OnceClosure hook) {
// Warm up APIs before turning on the sandbox.
// Execute the post warmup callback.
if (!hook.is_null())
// Actually sandbox the process.
return Sandbox::EnableSandbox(sandbox_type, allowed_dir);
} // namespace
bool InitializeSandbox(int sandbox_type, const base::FilePath& allowed_dir) {
return InitializeSandbox(sandbox_type, allowed_dir, base::OnceClosure());
// Fill in |sandbox_type| and |allowed_dir| based on the command line, returns
// false if the current process type doesn't need to be sandboxed or if the
// sandbox was disabled from the command line.
bool GetSandboxTypeFromCommandLine(int* sandbox_type,
base::FilePath* allowed_dir) {
*sandbox_type = -1;
*allowed_dir = base::FilePath(); // Empty by default.
const base::CommandLine& command_line =
if (command_line.HasSwitch(switches::kNoSandbox))
return false;
if (command_line.HasSwitch(switches::kV2SandboxedEnabled)) {
// Do not enable the sandbox if V2 is already enabled.
return false;
std::string process_type =
if (process_type.empty()) {
// Browser process isn't sandboxed.
return false;
} else if (process_type == switches::kRendererProcess) {
*sandbox_type = SANDBOX_TYPE_RENDERER;
} else if (process_type == switches::kUtilityProcess) {
// Utility process sandbox.
*sandbox_type = SANDBOX_TYPE_UTILITY;
*allowed_dir =
} else if (process_type == switches::kGpuProcess) {
if (command_line.HasSwitch(switches::kDisableGpuSandbox))
return false;
*sandbox_type = SANDBOX_TYPE_GPU;
} else if (process_type == switches::kPpapiBrokerProcess) {
return false;
} else if (process_type == switches::kPpapiPluginProcess) {
*sandbox_type = SANDBOX_TYPE_PPAPI;
} else {
// This is a process which we don't know about, i.e. an embedder-defined
// process. If the embedder wants it sandboxed, they have a chance to return
// the sandbox profile in ContentClient::GetSandboxProfileForSandboxType.
return false;
return true;
bool InitializeSandboxWithPostWarmupHook(base::OnceClosure hook) {
int sandbox_type = 0;
base::FilePath allowed_dir;
if (!GetSandboxTypeFromCommandLine(&sandbox_type, &allowed_dir))
return true;
return InitializeSandbox(sandbox_type, allowed_dir, std::move(hook));
bool InitializeSandbox() {
return InitializeSandboxWithPostWarmupHook(base::OnceClosure());
} // namespace content