BastionApp Class Reference

Inheritance diagram for BastionApp:

Public Member Functions
	BastionApp ()
CefRefPtr< CefBrowserProcessHandler >	GetBrowserProcessHandler () override
void	OnBeforeCommandLineProcessing (const CefString &, CefRefPtr< CefCommandLine > cmd) override
void	set_no_sandbox (bool v)
	IMPLEMENT_REFCOUNTING (BastionApp)

Private Attributes
bool	no_sandbox_ = false

Detailed Description

Definition at line 795 of file bastionguard_cef.cpp.

Constructor & Destructor Documentation

BastionApp()

BastionApp::BastionApp ( )

inline

Definition at line 797 of file bastionguard_cef.cpp.

: no_sandbox_(running_confined()) {}

References no_sandbox_, and running_confined().

Referenced by IMPLEMENT_REFCOUNTING(), and main().

Member Function Documentation

GetBrowserProcessHandler()

CefRefPtr< CefBrowserProcessHandler > BastionApp::GetBrowserProcessHandler ( )

inlineoverride

Definition at line 799 of file bastionguard_cef.cpp.

                                                                            {
        return this;
    }

IMPLEMENT_REFCOUNTING()

BastionApp::IMPLEMENT_REFCOUNTING

(

BastionApp

)

References BastionApp().

OnBeforeCommandLineProcessing()

void BastionApp::OnBeforeCommandLineProcessing ( const CefString & , CefRefPtr< CefCommandLine > cmd )

inlineoverride

Definition at line 803 of file bastionguard_cef.cpp.

                                                                                                 {
        cmd->AppendSwitch("incognito");
        cmd->AppendSwitch("disable-extensions");
        cmd->AppendSwitch("no-first-run");
        cmd->AppendSwitch("no-default-browser-check");
        cmd->AppendSwitch("disable-gpu");
        cmd->AppendSwitch("disable-gpu-compositing");
        cmd->AppendSwitch("disable-software-rasterizer");
        cmd->AppendSwitch("disable-gpu-process-crash-limit");
        cmd->AppendSwitch("in-process-gpu");
        cmd->AppendSwitch("disable-accelerated-2d-canvas");
        cmd->AppendSwitch("disable-accelerated-video-decode");
        cmd->AppendSwitch("disable-webgl");
 
        // ANTI-CRASH IN SANDBOX: settings.no_sandbox copre il processo
        // browser, ma i sottoprocessi (zygote, renderer, gpu, utility)
        // leggono i flag dalla command line. In ambiente confinato dobbiamo
        // propagare esplicitamente --no-sandbox a tutti, altrimenti la zygote
        // tenta comunque clone(CLONE_NEWUSER) e aborta.
        if (no_sandbox_) {
            if (!cmd->HasSwitch("no-sandbox"))
                cmd->AppendSwitch("no-sandbox");
            if (!cmd->HasSwitch("disable-setuid-sandbox"))
                cmd->AppendSwitch("disable-setuid-sandbox");
            if (!cmd->HasSwitch("disable-namespace-sandbox"))
                cmd->AppendSwitch("disable-namespace-sandbox");
        }
    }

References no_sandbox_.

set_no_sandbox()

void BastionApp::set_no_sandbox ( bool v )

inline

Definition at line 835 of file bastionguard_cef.cpp.

{ no_sandbox_ = v; }

References no_sandbox_.

Member Data Documentation

no_sandbox_

bool BastionApp::no_sandbox_ = false

private

Definition at line 840 of file bastionguard_cef.cpp.

Referenced by BastionApp(), OnBeforeCommandLineProcessing(), and set_no_sandbox().

---

The documentation for this class was generated from the following file:

• BastionGuard/src/cef/bastionguard_cef.cpp