mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-27 04:05:32 +00:00
6c8bcd4625
This is to support WebGL with hybrid graphics drivers that connect to a secondary X server for GL (Primus and VirtualGL), without allowing access to arbitrary sockets. In addition to local X11 connections, Primus needs to connect to the Bumblebee daemon (otherwise it will exit the calling process). The broker support is limited to AF_UNIX, to non-datagram sockets (see bug 1066750), and to pathname addresses. Abstract addresses could theoretically be handled but there isn't currently a compelling reason to, and the broker very much assumes it's dealing with a C-style string referring to a filesystem path and not an arbitrary byte sequence (including NULs). At a higher level: If the GPU X server is remote then it won't work, but it won't work anyway because WebGL requires features that aren't supported by indirect GLX. If the GPU X server is local but the browser is inside a chroot, it will fail to connect unless /tmp/.X11-unix is bind-mounted into the chroot; hopefully this use case is not common. MozReview-Commit-ID: IvI2jYDRZZ2
61 lines
2.0 KiB
C++
61 lines
2.0 KiB
C++
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
|
|
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this file,
|
|
* You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
#ifndef mozilla_SandboxBrokerClient_h
|
|
#define mozilla_SandboxBrokerClient_h
|
|
|
|
#include "broker/SandboxBrokerCommon.h"
|
|
#include "broker/SandboxBrokerUtils.h"
|
|
|
|
#include "mozilla/Attributes.h"
|
|
|
|
// This is the client for the sandbox broker described in
|
|
// broker/SandboxBroker.h; its constructor takes the file descriptor
|
|
// returned by SandboxBroker::Create, passed to the child over IPC.
|
|
//
|
|
// The operations exposed here can be called from any thread and in
|
|
// async signal handlers, like the corresponding system calls. The
|
|
// intended use is from a seccomp-bpf SIGSYS handler, to transparently
|
|
// replace those syscalls, but they could also be used directly.
|
|
|
|
struct stat;
|
|
struct sockaddr_un;
|
|
|
|
namespace mozilla {
|
|
|
|
class SandboxBrokerClient final : private SandboxBrokerCommon {
|
|
public:
|
|
explicit SandboxBrokerClient(int aFd);
|
|
~SandboxBrokerClient();
|
|
|
|
int Open(const char* aPath, int aFlags);
|
|
int Access(const char* aPath, int aMode);
|
|
int Stat(const char* aPath, statstruct* aStat);
|
|
int LStat(const char* aPath, statstruct* aStat);
|
|
int Chmod(const char* aPath, int aMode);
|
|
int Link(const char* aPath, const char* aPath2);
|
|
int Mkdir(const char* aPath, int aMode);
|
|
int Symlink(const char* aOldPath, const char* aNewPath);
|
|
int Rename(const char* aOldPath, const char* aNewPath);
|
|
int Unlink(const char* aPath);
|
|
int Rmdir(const char* aPath);
|
|
int Readlink(const char* aPath, void* aBuf, size_t aBufSize);
|
|
int Connect(const struct sockaddr_un* aAddr, size_t aLen, int aType);
|
|
|
|
private:
|
|
int mFileDesc;
|
|
|
|
int DoCall(const Request* aReq,
|
|
const char* aPath,
|
|
const char* aPath2,
|
|
void *aReponseBuff,
|
|
bool expectFd);
|
|
};
|
|
|
|
} // namespace mozilla
|
|
|
|
#endif // mozilla_SandboxBrokerClient_h
|