chromium/sandbox/linux/services/namespace_utils.cc

// Copyright 2015 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "sandbox/linux/services/namespace_utils.h"

#include <fcntl.h>
#include <sched.h>
#include <stddef.h>
#include <sys/stat.h>
#include <sys/types.h>
#include <unistd.h>

#include <string>

#include "base/check.h"
#include "base/files/file_path.h"
#include "base/files/file_util.h"
#include "base/files/scoped_file.h"
#include "base/notreached.h"
#include "base/posix/eintr_wrapper.h"
#include "base/process/launch.h"
#include "base/strings/safe_sprintf.h"

namespace sandbox {

namespace {
const char kProcSelfSetgroups[] = …;
}  // namespace

// static
bool NamespaceUtils::WriteToIdMapFile(const char* map_file, generic_id_t id) { … }

// static
bool NamespaceUtils::KernelSupportsUnprivilegedNamespace(int type) { … }

// static
bool NamespaceUtils::KernelSupportsDenySetgroups() { … }

// static
bool NamespaceUtils::DenySetgroups() { … }

}  // namespace sandbox