blob: 0071ca156e6387ac4897d142571942d96ca1ec92 [file] [log] [blame]
// Copyright 2017 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "build/build_config.h"
#include "services/service_manager/sandbox/export.h"
#include "services/service_manager/sandbox/sandbox_type.h"
#if defined(OS_LINUX)
#include "services/service_manager/sandbox/linux/sandbox_linux.h"
#if defined(OS_MACOSX)
#include "base/callback.h"
#endif // defined(OS_MACOSX)
namespace sandbox {
struct SandboxInterfaceInfo;
} // namespace sandbox
namespace service_manager {
// Interface to the service manager sandboxes across the various platforms.
// Ideally, this API would abstract away the platform differences, but there
// are some major OS differences that shape this interface, including:
// * Whether the sandboxing is performed by the launcher (Windows, Fuchsia
// someday) or by the launchee (Linux, Mac).
// * The means of specifying the additional resources that are permitted.
// * The need to "warmup" other resources before engaing the sandbox.
#if defined(OS_LINUX)
static bool Initialize(SandboxType sandbox_type,
SandboxLinux::PreSandboxHook hook,
const SandboxLinux::Options& options);
#endif // defined(OS_LINUX)
#if defined(OS_MACOSX)
// Initialize the sandbox of |sandbox_type|. Runs |post_warmup_hook| if
// non-empty after performing any sandbox warmup but immediately before
// engaging the sandbox. Return true on success, false otherwise.
static bool Initialize(SandboxType sandbox_type,
base::OnceClosure post_warmup_hook);
#endif // defined(OS_MACOSX)
#if defined(OS_WIN)
static bool Initialize(service_manager::SandboxType sandbox_type,
sandbox::SandboxInterfaceInfo* sandbox_info);
#endif // defined(OS_WIN)
} // namespace service_manager