// Copyright 2019 Google LLC // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. #ifndef SANDBOXED_API_SANDBOX2_FORKINGCLIENT_H_ #define SANDBOXED_API_SANDBOX2_FORKINGCLIENT_H_ #include #include #include "sandboxed_api/sandbox2/client.h" #include "sandboxed_api/sandbox2/comms.h" #include "sandboxed_api/sandbox2/forkserver.h" namespace sandbox2 { class ForkingClient : public Client { public: explicit ForkingClient(Comms* comms) : Client(comms) {} // Forks the current process (if asked by the Executor in the parent process), // and returns the newly created PID to this Executor. This is used if the // current Client objects acts as a wrapper of ForkServer (and this process // was created to act as a ForkServer). // Return values specified as with 'fork' (incl. -1). pid_t WaitAndFork(); private: // ForkServer object, which is used only if the current process is meant // to behave like a Fork-Server, i.e. to create a new process which will be // later sandboxed (with SandboxMeHere()). std::unique_ptr fork_server_worker_; }; } // namespace sandbox2 #endif // SANDBOXED_API_SANDBOX2_FORKINGCLIENT_H_