| // Copyright 2020 The Chromium Authors |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #ifndef CONTENT_BROWSER_UTILITY_SANDBOX_DELEGATE_H_ |
| #define CONTENT_BROWSER_UTILITY_SANDBOX_DELEGATE_H_ |
| |
| #include "base/command_line.h" |
| #include "base/environment.h" |
| #include "base/files/file_path.h" |
| #include "build/build_config.h" |
| #include "content/public/common/sandboxed_process_launcher_delegate.h" |
| #include "content/public/common/zygote/zygote_buildflags.h" |
| #include "sandbox/policy/mojom/sandbox.mojom.h" |
| |
| #if BUILDFLAG(USE_ZYGOTE) |
| #include "content/public/common/zygote/zygote_handle.h" |
| #endif // BUILDFLAG(USE_ZYGOTE) |
| |
| #if BUILDFLAG(IS_WIN) |
| #include "sandbox/win/src/sandbox_policy.h" |
| #endif // BUILDFLAG(IS_WIN) |
| |
| namespace content { |
| class UtilitySandboxedProcessLauncherDelegate |
| : public SandboxedProcessLauncherDelegate { |
| public: |
| UtilitySandboxedProcessLauncherDelegate(sandbox::mojom::Sandbox sandbox_type, |
| const base::EnvironmentMap& env, |
| const base::CommandLine& cmd_line); |
| ~UtilitySandboxedProcessLauncherDelegate() override; |
| |
| sandbox::mojom::Sandbox GetSandboxType() override; |
| |
| #if BUILDFLAG(IS_WIN) |
| std::string GetSandboxTag() override; |
| bool GetAppContainerId(std::string* appcontainer_id) override; |
| bool DisableDefaultPolicy() override; |
| bool ShouldLaunchElevated() override; |
| bool InitializeConfig(sandbox::TargetConfig* config) override; |
| bool ShouldUnsandboxedRunInJob() override; |
| bool CetCompatible() override; |
| bool AllowWindowsFontsDir() override; |
| bool PreSpawnTarget(sandbox::TargetPolicy* policy) override; |
| // Set preload libraries to transfer as part of the sandbox delegate data, |
| // which will used in utility_main to preload these libraries before lockdown. |
| void SetPreloadLibraries(const std::vector<base::FilePath>& preloads) { |
| preload_libraries_ = preloads; |
| } |
| void SetPinUser32() { pin_user32_ = true; } |
| #endif // BUILDFLAG(IS_WIN) |
| |
| #if BUILDFLAG(USE_ZYGOTE) |
| ZygoteCommunication* GetZygote() override; |
| #endif // BUILDFLAG(USE_ZYGOTE) |
| |
| #if BUILDFLAG(IS_POSIX) |
| base::EnvironmentMap GetEnvironment() override; |
| #endif // BUILDFLAG(IS_POSIX) |
| |
| #if BUILDFLAG(USE_ZYGOTE) |
| void SetZygote(ZygoteCommunication* handle); |
| #endif // BUILDFLAG(USE_ZYGOTE_HANDLE) |
| |
| private: |
| #if BUILDFLAG(IS_POSIX) |
| base::EnvironmentMap env_; |
| #endif // BUILDFLAG(IS_POSIX) |
| |
| #if BUILDFLAG(IS_WIN) |
| std::vector<base::FilePath> preload_libraries_; |
| bool pin_user32_; |
| #endif // BUILDFLAG(IS_WIN) |
| |
| #if BUILDFLAG(USE_ZYGOTE) |
| absl::optional<raw_ptr<ZygoteCommunication>> zygote_; |
| #endif // BUILDFLAG(USE_ZYGOTE) |
| |
| sandbox::mojom::Sandbox sandbox_type_; |
| base::CommandLine cmd_line_; |
| }; |
| } // namespace content |
| |
| #endif // CONTENT_BROWSER_UTILITY_SANDBOX_DELEGATE_H_ |