chromium/sandbox/linux/services/yama.cc

// Copyright 2014 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "sandbox/linux/services/yama.h"

#include <errno.h>
#include <fcntl.h>
#include <stddef.h>
#include <sys/prctl.h>
#include <sys/stat.h>
#include <sys/types.h>
#include <unistd.h>

#include "base/check.h"
#include "base/files/file_util.h"
#include "base/files/scoped_file.h"
#include "base/notreached.h"
#include "base/posix/eintr_wrapper.h"
#include "sandbox/linux/system_headers/linux_prctl.h"

namespace sandbox {

namespace {

// Enable or disable the Yama ptracers restrictions.
// Return false if Yama is not present on this kernel.
bool SetYamaPtracersRestriction(bool enable_restrictions) { … }

bool CanAccessProcFS() { … }

}  // namespace

// static
bool Yama::RestrictPtracersToAncestors() { … }

// static
bool Yama::DisableYamaRestrictions() { … }

// static
int Yama::GetStatus() { … }

// static
bool Yama::IsPresent() { … }

// static
bool Yama::IsEnforcing() { … }

}  // namespace sandbox