content/common/sandbox_linux.cc
// For seccomp-legacy, we implement the policy inline, here.
For seccomp-legacy, we implement the policy inline, here.
For seccomp - legacy we implement the policy inline here .
bool LinuxSandbox::StartSeccompLegacy(const std::string& process_type) {
  if (!pre_initialized_)
    PreinitializeSandbox(process_type);
  if (seccomp_legacy_supported() && ShouldEnableSeccompLegacy(process_type)) {
#if defined(SECCOMP_SANDBOX)
    if (SupportsSeccompSandbox(-1)) {
      StartSeccompSandbox();
      LogSandboxStarted("seccomp-legacy");
      return true;
    }
#endif
  }
  return false;
}
bool LinuxSandbox :: StartSeccompLegacy ( const std :: string & process_type ) { if ( ! pre_initialized_ ) PreinitializeSandbox ( process_type ) ; if ( seccomp_legacy_supported ( ) && ShouldEnableSeccompLegacy ( process_type ) ) { #if defined ( SECCOMP_SANDBOX ) if ( SupportsSeccompSandbox ( -1 ) ) { StartSeccompSandbox ( ) ; LogSandboxStarted ( " " ) ; return true ; } #endif } return false ; }
For seccomp-legacy, we implement the policy inline, here.
For seccomp - legacy we implement the policy inline here .
// SupportsSeccompSandbox() returns a cached result, as we already // called it earlier in the PreinitializeSandbox(). Thus, it is OK for us // to not pass in a file descriptor for "/proc".