sandbox/policy/linux/bpf_gpu_policy_linux.h

// Copyright 2013 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef SANDBOX_POLICY_LINUX_BPF_GPU_POLICY_LINUX_H_
#define SANDBOX_POLICY_LINUX_BPF_GPU_POLICY_LINUX_H_

#include "sandbox/linux/bpf_dsl/bpf_dsl.h"
#include "sandbox/policy/export.h"
#include "sandbox/policy/linux/bpf_base_policy_linux.h"

namespace sandbox {
namespace policy {

enum class MremapPolicy {
  kBlock,
  kAllow,
};

class SANDBOX_POLICY_EXPORT GpuProcessPolicy : public BPFBasePolicy {
 public:
  explicit GpuProcessPolicy(MremapPolicy mremap_policy);

  GpuProcessPolicy(const GpuProcessPolicy&) = delete;
  GpuProcessPolicy& operator=(const GpuProcessPolicy&) = delete;

  ~GpuProcessPolicy() override;

  bpf_dsl::ResultExpr EvaluateSyscall(int system_call_number) const override;

 private:
  MremapPolicy mremap_policy_;
};

}  // namespace policy
}  // namespace sandbox

#endif  // SANDBOX_POLICY_LINUX_BPF_GPU_POLICY_LINUX_H_