/usr/include/thunderbird/mozilla/SandboxInfo.h is in thunderbird-dev 1:38.6.0+build1-0ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 | /* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this file,
* You can obtain one at http://mozilla.org/MPL/2.0/. */
#ifndef mozilla_SandboxInfo_h
#define mozilla_SandboxInfo_h
#include "mozilla/Types.h"
// Information on what parts of sandboxing are enabled in this build
// and/or supported by the system.
namespace mozilla {
class SandboxInfo {
public:
// No need to prevent copying; this is essentially just a const int.
SandboxInfo(const SandboxInfo& aOther) : mFlags(aOther.mFlags) { }
// Flags are checked at initializer time; this returns them.
static const SandboxInfo& Get() { return sSingleton; }
enum Flags {
// System call filtering; kernel config option CONFIG_SECCOMP_FILTER.
kHasSeccompBPF = 1 << 0,
// Config flag MOZ_CONTENT_SANDBOX; env var MOZ_DISABLE_CONTENT_SANDBOX.
kEnabledForContent = 1 << 1,
// Config flag MOZ_GMP_SANDBOX; env var MOZ_DISABLE_GMP_SANDBOX.
kEnabledForMedia = 1 << 2,
// Env var MOZ_SANDBOX_VERBOSE.
kVerbose = 1 << 3,
};
bool Test(Flags aFlag) const { return (mFlags & aFlag) == aFlag; }
// Returns true if SetContentProcessSandbox may be called.
bool CanSandboxContent() const
{
return !Test(kEnabledForContent) || Test(kHasSeccompBPF);
}
// Returns true if SetMediaPluginSandbox may be called.
bool CanSandboxMedia() const
{
return !Test(kEnabledForMedia) || Test(kHasSeccompBPF);
}
private:
enum Flags mFlags;
static MOZ_EXPORT const SandboxInfo sSingleton;
SandboxInfo();
};
} // namespace mozilla
#endif // mozilla_SandboxInfo_h
|