mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
5748fc5814
This reorganizes SandboxAssembler to stack up the policy rules and traverse them in reverse order to build the filter DAG from tail to head (i.e., starting with "deny all" and prepending allow and return-errno rules). Thus, this code will continue to work (perhaps with minor changes, such as to the NodePtr typedef) with future versions of the Chromium sandbox code that don't allow mutating the filter program with the JoinInstructions method. |
||
|---|---|---|
| .. | ||
| common | ||
| glue | ||
| android_arm_ucontext.h | ||
| android_i386_ucontext.h | ||
| android_ucontext.h | ||
| arm_linux_syscalls.h | ||
| LICENSE | ||
| linux_seccomp.h | ||
| linux_syscalls.h | ||
| moz.build | ||
| Sandbox.cpp | ||
| Sandbox.h | ||
| SandboxAssembler.cpp | ||
| SandboxAssembler.h | ||
| SandboxFilter.cpp | ||
| SandboxFilter.h | ||
| SandboxInternal.h | ||
| SandboxLogging.h | ||
| x86_32_linux_syscalls.h | ||
| x86_64_linux_syscalls.h | ||