wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 993145 - Skip attempting seccomp sandboxing if seccomp unavailable. r=kang

Browse Source
This commit is contained in:
Jed Davis 2014-04-09 15:23:00 +02:00
parent 8902a00c07
commit f8ce2f4279
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
security/sandbox/linux/Sandbox.cpp
View File

@ -386,6 +386,14 @@ BroadcastSetThreadSandbox()
SetThreadSandbox();
}
// This function can overapproximate (i.e., return true even if
// sandboxing isn't supported, but not the reverse). See bug 993145.
static bool
IsSandboxingSupported(void)
{
return prctl(PR_GET_SECCOMP) != -1;
}
/**
* Starts the seccomp sandbox for this process and sets user/group-based privileges.
* Should be called only once, and before any potentially harmful content is loaded.
@ -408,7 +416,9 @@ SetCurrentProcessSandbox()
}
#endif
BroadcastSetThreadSandbox();
if (IsSandboxingSupported()) {
BroadcastSetThreadSandbox();
}
}
} // namespace mozilla