| // Copyright 2012 The Chromium Authors |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #ifndef CONTENT_PUBLIC_COMMON_SANDBOXED_PROCESS_LAUNCHER_DELEGATE_H_ |
| #define CONTENT_PUBLIC_COMMON_SANDBOXED_PROCESS_LAUNCHER_DELEGATE_H_ |
| |
| #include "base/environment.h" |
| #include "base/files/scoped_file.h" |
| #include "base/process/process.h" |
| #include "build/build_config.h" |
| #include "content/common/content_export.h" |
| #include "content/public/common/zygote/zygote_buildflags.h" |
| #include "sandbox/policy/sandbox_delegate.h" |
| |
| #if BUILDFLAG(USE_ZYGOTE) |
| #include "content/public/common/zygote/zygote_handle.h" // nogncheck |
| #endif // BUILDFLAG(USE_ZYGOTE) |
| |
| namespace content { |
| |
| // Allows a caller of StartSandboxedProcess or |
| // BrowserChildProcessHost/ChildProcessLauncher to control the sandbox policy, |
| // i.e. to loosen it if needed. |
| // The methods below will be called on the PROCESS_LAUNCHER thread. |
| class CONTENT_EXPORT SandboxedProcessLauncherDelegate |
| : public sandbox::policy::SandboxDelegate { |
| public: |
| ~SandboxedProcessLauncherDelegate() override {} |
| |
| #if BUILDFLAG(IS_WIN) |
| // sandbox::policy::SandboxDelegate: |
| std::string GetSandboxTag() override; |
| bool DisableDefaultPolicy() override; |
| bool GetAppContainerId(std::string* appcontainer_id) override; |
| bool InitializeConfig(sandbox::TargetConfig* config) override; |
| bool PreSpawnTarget(sandbox::TargetPolicy* policy) override; |
| void PostSpawnTarget(base::ProcessHandle process) override; |
| bool ShouldUnsandboxedRunInJob() override; |
| bool CetCompatible() override; |
| bool AllowWindowsFontsDir() override; |
| #endif // BUILDFLAG(IS_WIN) |
| |
| #if BUILDFLAG(IS_WIN) |
| // Override to return true if the process should be launched as an elevated |
| // process (which implies no sandbox). |
| virtual bool ShouldLaunchElevated(); |
| |
| // Whether or not to use the MOJO_SEND_INVITATION_FLAG_UNTRUSTED_PROCESS flag |
| // on the outgoing invitation used to create the mojo connection to this |
| // process. |
| virtual bool ShouldUseUntrustedMojoInvitation(); |
| #endif // BUILDFLAG(IS_WIN) |
| |
| #if BUILDFLAG(USE_ZYGOTE) |
| // Returns the zygote used to launch the process. |
| virtual ZygoteCommunication* GetZygote(); |
| #endif // BUILDFLAG(USE_ZYGOTE) |
| |
| #if BUILDFLAG(IS_POSIX) |
| // Override this if the process needs a non-empty environment map. |
| virtual base::EnvironmentMap GetEnvironment(); |
| #endif // BUILDFLAG(IS_POSIX) |
| |
| #if BUILDFLAG(IS_MAC) |
| // Whether or not to disclaim TCC responsibility for the process, defaults to |
| // false. See base::LaunchOptions::disclaim_responsibility. |
| virtual bool DisclaimResponsibility(); |
| |
| // Whether or not to enable CPU security mitigations against side-channel |
| // attacks. See base::LaunchOptions::enable_cpu_security_mitigations. |
| virtual bool EnableCpuSecurityMitigations(); |
| #endif // BUILDFLAG(IS_MAC) |
| }; |
| |
| } // namespace content |
| |
| #endif // CONTENT_PUBLIC_COMMON_SANDBOXED_PROCESS_LAUNCHER_DELEGATE_H_ |