mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-09-22 14:04:58 +02:00
f9c1ba6493
It's controlled by the new Sandbox argument. Right now, it's rather coarse-grained, it's Linux-only, and it may break some features.
56 lines
910 B
C
56 lines
910 B
C
/* Copyright (c) 2001 Matej Pfajfar.
|
|
* Copyright (c) 2001-2004, Roger Dingledine.
|
|
* Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson.
|
|
* Copyright (c) 2007-2013, The Tor Project, Inc. */
|
|
/* See LICENSE for licensing information */
|
|
|
|
/**
|
|
* \file sandbox.h
|
|
* \brief Header file for sandbox.c.
|
|
**/
|
|
|
|
#ifndef SANDBOX_H_
|
|
#define SANDBOX_H_
|
|
|
|
#ifndef SYS_SECCOMP
|
|
|
|
/**
|
|
* Used by SIGSYS signal handler to check if the signal was issued due to a
|
|
* seccomp2 filter violation.
|
|
*/
|
|
#define SYS_SECCOMP 1
|
|
|
|
#endif
|
|
|
|
/**
|
|
* Linux definitions
|
|
*/
|
|
#ifdef __linux__
|
|
|
|
#define __USE_GNU
|
|
#include <sys/ucontext.h>
|
|
|
|
/**
|
|
* Linux 32 bit definitions
|
|
*/
|
|
#if defined(__i386__)
|
|
|
|
#define REG_SYSCALL REG_EAX
|
|
|
|
/**
|
|
* Linux 64 bit definitions
|
|
*/
|
|
#elif defined(__x86_64__)
|
|
|
|
#define REG_SYSCALL REG_RAX
|
|
|
|
#endif
|
|
|
|
#endif // __linux__
|
|
|
|
void sandbox_set_debugging_fd(int fd);
|
|
int tor_global_sandbox(void);
|
|
|
|
#endif /* SANDBOX_H_ */
|
|
|