aboutsummaryrefslogtreecommitdiffstats
path: root/executor/executor.cc
diff options
context:
space:
mode:
authorDmitry Vyukov <dvyukov@google.com>2018-09-17 11:39:04 +0200
committerDmitry Vyukov <dvyukov@google.com>2018-09-17 11:39:04 +0200
commit98f4a9612dd54429b3f92dccf631fdfa4f9018f3 (patch)
tree673d1b4845d7a6de5b0a20c30a28d76c32356018 /executor/executor.cc
parent0eca949a6c271b879d582e01c3d1d79dc704172c (diff)
executor: make sandboxes more modular
Currently we have a global fixed set of sandboxes, which makes it hard to add new OS-specific ones (all OSes need to updated to say that they don't support this sandbox). Let it each OS say what sandboxes it supports instead.
Diffstat (limited to 'executor/executor.cc')
-rw-r--r--executor/executor.cc6
1 files changed, 6 insertions, 0 deletions
diff --git a/executor/executor.cc b/executor/executor.cc
index 2244cc797..fca80e9be 100644
--- a/executor/executor.cc
+++ b/executor/executor.cc
@@ -364,15 +364,21 @@ int main(int argc, char** argv)
case sandbox_none:
status = do_sandbox_none();
break;
+#if SYZ_HAVE_SANDBOX_SETUID
case sandbox_setuid:
status = do_sandbox_setuid();
break;
+#endif
+#if SYZ_HAVE_SANDBOX_NAMESPACE
case sandbox_namespace:
status = do_sandbox_namespace();
break;
+#endif
+#if SYZ_HAVE_SANDBOX_ANDROID_UNTRUSTED_APP
case sandbox_android_untrusted_app:
status = do_sandbox_android_untrusted_app();
break;
+#endif
default:
fail("unknown sandbox type");
}