blob: 92b49c53663cf31ef1f934513c6b22cf1baa7082 [file] [log] [blame]
// Copyright (c) 2011 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "content/public/common/sandbox_init.h"
#include "base/callback.h"
#include "base/command_line.h"
#include "base/files/file_path.h"
#include "base/logging.h"
#include "content/public/common/content_switches.h"
#include "gpu/config/gpu_feature_info.h"
#include "gpu/config/gpu_info.h"
#include "gpu/config/gpu_switches.h"
#include "gpu/config/gpu_util.h"
#include "gpu/ipc/common/gpu_preferences_util.h"
#include "media/gpu/vt_video_decode_accelerator_mac.h"
#include "sandbox/mac/seatbelt.h"
#include "services/service_manager/sandbox/mac/sandbox_mac.h"
#include "services/service_manager/sandbox/sandbox.h"
#include "services/service_manager/sandbox/sandbox_type.h"
#include "ui/gl/init/gl_factory.h"
namespace content {
namespace {
// Helper method to make a closure from a closure.
base::OnceClosure MaybeWrapWithGPUSandboxHook(
service_manager::SandboxType sandbox_type,
base::OnceClosure original) {
if (sandbox_type != service_manager::SANDBOX_TYPE_GPU)
return original;
return base::Bind(
[](base::OnceClosure arg) {
// We need to gather GPUInfo and compute GpuFeatureInfo here, so we can
// decide if initializing core profile or compatibility profile GL,
// depending on gpu driver bug workarounds.
gpu::GPUInfo gpu_info;
auto* command_line = base::CommandLine::ForCurrentProcess();
// TODO(zmo): Collect basic GPUInfo instead.
gpu::GetGpuInfoFromCommandLine(*command_line, &gpu_info);
gpu::CacheGPUInfo(gpu_info);
gpu::GpuPreferences gpu_preferences;
if (command_line->HasSwitch(switches::kGpuPreferences)) {
std::string value =
command_line->GetSwitchValueASCII(switches::kGpuPreferences);
bool success =
gpu::SwitchValueToGpuPreferences(value, &gpu_preferences);
CHECK(success);
}
gpu::GpuFeatureInfo gpu_feature_info = gpu::ComputeGpuFeatureInfo(
gpu_info, gpu_preferences.ignore_gpu_blacklist,
gpu_preferences.disable_gpu_driver_bug_workarounds,
gpu_preferences.log_gpu_control_list_decisions, command_line);
gpu::CacheGpuFeatureInfo(gpu_feature_info);
// Preload either the desktop GL or the osmesa so, depending on the
// --use-gl flag.
gl::init::InitializeGLOneOff();
// Preload VideoToolbox.
media::InitializeVideoToolbox();
// Invoke original hook.
if (!arg.is_null())
std::move(arg).Run();
},
base::Passed(std::move(original)));
}
// Fill in |sandbox_type| and |allowed_dir| based on the command line, returns
// false if the current process type doesn't need to be sandboxed or if the
// sandbox was disabled from the command line.
bool GetSandboxInfoFromCommandLine(service_manager::SandboxType* sandbox_type,
base::FilePath* allowed_dir) {
DCHECK(sandbox_type);
DCHECK(allowed_dir);
*allowed_dir = base::FilePath(); // Empty by default.
auto* command_line = base::CommandLine::ForCurrentProcess();
std::string process_type =
command_line->GetSwitchValueASCII(switches::kProcessType);
if (process_type == switches::kUtilityProcess) {
*allowed_dir =
command_line->GetSwitchValuePath(switches::kUtilityProcessAllowedDir);
}
*sandbox_type = service_manager::SandboxTypeFromCommandLine(*command_line);
if (service_manager::IsUnsandboxedSandboxType(*sandbox_type))
return false;
if (command_line->HasSwitch(switches::kV2SandboxedEnabled)) {
CHECK(sandbox::Seatbelt::IsSandboxed());
// Do not enable the sandbox if V2 is already enabled.
return false;
}
return *sandbox_type != service_manager::SANDBOX_TYPE_INVALID;
}
} // namespace
bool InitializeSandbox(service_manager::SandboxType sandbox_type,
const base::FilePath& allowed_dir) {
return service_manager::Sandbox::Initialize(
sandbox_type, allowed_dir,
MaybeWrapWithGPUSandboxHook(sandbox_type, base::OnceClosure()));
}
bool InitializeSandbox(base::OnceClosure post_warmup_hook) {
service_manager::SandboxType sandbox_type =
service_manager::SANDBOX_TYPE_INVALID;
base::FilePath allowed_dir;
return !GetSandboxInfoFromCommandLine(&sandbox_type, &allowed_dir) ||
service_manager::Sandbox::Initialize(
sandbox_type, allowed_dir,
MaybeWrapWithGPUSandboxHook(sandbox_type,
std::move(post_warmup_hook)));
}
bool InitializeSandbox() {
return InitializeSandbox(base::OnceClosure());
}
} // namespace content